Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Jul 2008 01:20:35 +0100
From:      RW <fbsd06@mlists.homeunix.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Root boot/mount Password?
Message-ID:  <20080730012035.66564794@gumby.homeunix.com.>
In-Reply-To: <20080727101216.GA42938@slackbox.xs4all.nl>
References:  <3267.84.18.27.248.1217152064.squirrel@mail.dsa.es> <20080727101216.GA42938@slackbox.xs4all.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 27 Jul 2008 12:12:16 +0200
Roland Smith <rsmith@xs4all.nl> wrote:


> Note that encrypting the partitions where the OS lives is not
> particularly usefull; there is nothing secret there. On the contrary,
> it would potentially make the encrypted partition vulnerable to a
> known plaintext attack.

The reason for doing it is to protect the OS from modification. For
that to be effective the /boot really needs to be on removable media.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080730012035.66564794>