LINUX的文件系统可不可以加密？

yh6788

听说日本最新设计了一种双磁头的硬盘，不知道能不能用来加密，听说是防黑客的，就算不能，日本也有能力设计出一种物理的加理办法。

symbolzhao

刚才楼上有人说到ntfs的那个问题，用高版本的norton ghost把硬盘做成镜象，然后再用norton ghost explore就可以看到全部内容鸟。

印象中两三年前有人提到权限问题，大约是不要超级用户，用类似三权分立的思想来管理系统。

在个人用户平台和小规模应用里面，恐怕搂主说得这样都没有办法实现

yuguanglou

嘿嘿 你自己研究一套文件系统吧

bingosek

有几种方法，见http://linuxreviews.org/howtos/security/

ulovko

Another popular FreeBSD filesystem feature is its integrated encrypted
partitions. FreeBSD supports two different filesystem encryption systems out
of the box: GBDE and GELI. Geom Based Disk Encryption (GBDE) was FreeBSD’s
first encrypted filesystem designed for military-grade use. GELI is a little
more friendly and complies with different standards than GBDE.

GBDE, or Geom-Based Disk Encryption, has specific features for high-security
environments where protecting the user is just as important as concealing
the data. In addition to a cryptographic key provided by the user, GBDE uses
keys stored in particular sectors on the hard drive. If either key is unavailable,
the partition cannot be decrypted. Why is this important? If a secure data
center (say, in an embassy) comes under attack, the operator might have a
moment or two to destroy the keys on the hard drive and render the data
unrecoverable. If the bad guys have a gun to my head and tell me to “Enter
the passphrase or else,” I want the disk system to say The passphrase is
correct, but the keys have been destroyed. I don’t want a generic error saying
Cannot decrypt disk. In the first situation, I still have value as a blubbering
hostage; in the latter, either I’m dead or the attackers get unpleasantly
creative.

岁月无真

我暂时想不到有什么办法？抱歉。

wsp0108

如果非常非常 重要，就要请专业的加解密高手了，不然，就用一般的加密软件吧，如：gpg truecrept

theperl

发表于 2003-12-30 19:29:37
又给顶出来了。。。



cryptsetup luks

netmanit

使用cryptsetup 对整块硬盘加密。

blackjack550

wangfeixue 发表于 2003-12-30 21:11
听人说可以用awk加密但是不会

呵呵!

AWK也能加密？·