Re: TEST

[Tim Robbins <fyre@box3n.gumbynet.org>]

> OpenBSD seems to have something up on linux now in the way of security. A
> feature I rather like and am almost tempted to learn enough kernel hacking
> to port myself. The feature I'm speaking of happens to be encrypted swap.

Would that not be incredibly slow? On a low end machine that might halve
performance in the best case. It might be useful if you're paranoid that
the police are going to raid your house and go hunting through a few
hundred megabytes of swap space looking for evidence or
something. Encrypting swap would offer protection from that kind of thing,
but then again, the police will always have ways of making your life
difficult..

For the average Linux server on which nobody but the superuser can read
the swapspace, I don't see a lot of point in encrypting it.

Just my 1.2 cents (Australian dollar ain't worth much these days)

--
Tim Robbins
fyre@box3n.gumbynet.org


Kernel-audit:  discussion list for security and the linux kernel
Archive:       http://mail.nl.linux.org/kernel-audit/