Date: Sun, 13 Dec 2009 00:32:54 +0100 From: Max Laier <max@love2party.net> To: freebsd-current@freebsd.org Cc: Daniel Thiele <dthiele@gmx.net>, "Simon L. Nielsen" <simon@freebsd.org>, shaun@freebsd.org Subject: Re: Support for geli onetime encryption for /tmp? Message-ID: <200912130032.54740.max@love2party.net> In-Reply-To: <20091212224052.GF1417@arthur.nitro.dk> References: <4B24143E.2060803@gmx.net> <20091212224052.GF1417@arthur.nitro.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Saturday 12 December 2009 23:40:53 Simon L. Nielsen wrote: > On 2009.12.12 23:07:58 +0100, Daniel Thiele wrote: > > Is there maybe another way to achieve onetime /tmp encryption that > > I am missing? Preferably one that does not involve huge changes to > > Well, I use the simple one - make /tmp a memory file system. locate > is sometimes not too happy with an e.g. 50MB /tmp, but otherwise it > works very well for me. > > [simon@arthur:~] grep tmp /etc/rc.conf > tmpmfs="YES" > tmpsize="50M" but tmpfs pages are swappable IIRC. This would mean that the data might end up unencrypted on secondary storage. -- Max
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200912130032.54740.max>