Re: Userland encrypted filesystem that root cannot access.

From: Mike A. Harris (mharris@meteng.on.ca)
Date: Sat Feb 19 2000 - 01:03:23 EST

On Fri, 18 Feb 2000, Alexander Viro wrote:

>> Are there any patches for the kernel, or userland solutions which
>> allow a user to mount an encrypted filesystem (perhaps through
>> loopback) which while mounted, root cannot read? Or is this
>> concept beyond Linux currently?
>>
>> I'm thinking of the case where the superuser can admin the
>> machine but due to confidentiality, the data must not be readable
>> by root under any circumstance. Possible?
>
>Don't be silly. Hint: su lusername. God, root - what's the difference?

Hehe. Well, yes... That is what I assumed - that it is
currently NOT possible. It is something that SHOULD be possible
sometime in the future though. There are systems out there, in
which for military reasons, or perhaps other top secret reasons
that files need to remain top secret and not visible to any
system admin person. I'm thinking here of A or B class
security.. which is likely a long way off.. Oh well, it was
worth asking anyways..

Thanks for your reply,
TTYL 

--
Mike A. Harris                                     Linux advocate     
Computer Consultant                                  GNU advocate  
Capslock Consulting                          Open Source advocate

Join the FreeMWare project - the goal to produce a FREE program in
which you can run Windows 95/98/NT, and other operating systems.

                    http://www.freemware.org

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

This archive was generated by hypermail 2b29 : Wed Feb 23 2000 - 21:00:22 EST