From owner-freebsd-security@FreeBSD.ORG Sun Jan 22 23:08:18 2006 Return-Path: X-Original-To: Freebsd-security@freebsd.org Delivered-To: Freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 358F616A41F; Sun, 22 Jan 2006 23:08:18 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id D48DD43D46; Sun, 22 Jan 2006 23:08:17 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1]) by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id k0MN8G5S008585; Sun, 22 Jan 2006 15:08:17 -0800 Received: (from brdavis@localhost) by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id k0MN8GER008584; Sun, 22 Jan 2006 15:08:16 -0800 Date: Sun, 22 Jan 2006 15:08:16 -0800 From: Brooks Davis To: Norberto Meijome Message-ID: <20060122230816.GC7703@odin.ac.hmc.edu> References: <43D409B8.6070704@meijome.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="RIYY1s2vRbPFwWeW" Content-Disposition: inline In-Reply-To: <43D409B8.6070704@meijome.net> User-Agent: Mutt/1.4.1i X-Virus-Scanned: by amavisd-new X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu Cc: Freebsd-security@freebsd.org, FreeBSD Questions Subject: Re: Encrypted volume - how? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Jan 2006 23:08:18 -0000 --RIYY1s2vRbPFwWeW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jan 23, 2006 at 09:39:52AM +1100, Norberto Meijome wrote: > Hi all, > I'm looking for a way to recreate the functionality of PGP Disk (under=20 > Win32). Basically, create an encrypted file, which contains a filesystem= =20 > which can then be mounted in any mount point. >=20 > I know I can use GELI in FreeBSD 6 - as I understand, it performs the=20 > encryption at the partition level (the whole partition is encrypted).=20 > I'd like to be able to simply unmount my 'secure volume', and be able to= =20 > back it up as a whole, or move it to another computer without having to= =20 > repartition the destination. I think GELI wouldn't be good for this. GELI or GBDE are probably what you're looking for, you just need to use mdconfig to create a vnode (file) backed disk image which you will encrypt and then create a file system on. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --RIYY1s2vRbPFwWeW Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFD1BBgXY6L6fI4GtQRArGMAKCtP+SpBFxdbE4ni+oj+qnMzAqpyACgwGuF wRKFhU7QBp9NOqnwYv0+vAc= =TjUx -----END PGP SIGNATURE----- --RIYY1s2vRbPFwWeW--