Re: Getting GELI Keys from Floppy
- From: Matt Piechota <piechota@xxxxxxxxxxx>
- Date: Thu, 7 Sep 2006 13:06:12 -0400 (EDT)
On Thu, 7 Sep 2006, Frank Steinborn wrote:
I could use /dev/fd0 directly but then I had to use the same key for
all 6 HDD's in the server. I got a solution by hacking /etc/rc.d/geli
- I'm just mounting the floppy there before it tries to read the key.
You could read different parts of the floppy for different keys.
Speaking of which, do the keys have any identifiable strings in them? If not, you could fill the floppy with random garbage and 'hide' the key. I'm assuming since you don't want a password you don't want the boot to require interaction so it's not that useful, but if nothing else it would help if someone got access to the floppy (remotely or by physical access).
freebsd-security@xxxxxxxxxxx mailing list
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
- Prev by Date: Re: Getting GELI Keys from Floppy
- Next by Date: Re: comments on handbook chapter
- Previous by thread: Re: Getting GELI Keys from Floppy
- Next by thread: FreeBSD Security Advisory FreeBSD-SA-06:19.openssl