[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Linux From Scratch - Encrypted Filesystem Howto
Christophe Devine wrote:
> A new version of the encrypted filesystem howto for the LFS project
> has been released, and is available at:
>
> http://hints.linuxfromscratch.org/hints/cryptoapi.txt
>
> Please let me know if you find any errors or typos in it.
1) For encrypted swap, best choice is to put put swap on encrypted
partition. Type "man swapon" for more details.
2) You recommend use of unseeded (unsalted) passwords. Please consider using
'losetup -S XXX' and 'mount -o pseed=XXX' options. Seeded passwords offer
much better resistance against optimized dictionary attacks.
3) You recommend loop-AES-v1.6i version. A small but important bug was fixed
in loop-AES-v1.7b that affects version v1.6i. If you insist on using
version v1.6i, please apply this patch after applying
loop-AES-v1.6i/kernel-2.4.20.diff
--- linux-2.4.21-pre4-AES/drivers/block/loop.c.old Thu Jan 30 11:59:54 2003
+++ linux-2.4.21-pre4-AES/drivers/block/loop.c Thu Jan 30 12:00:37 2003
@@ -600,6 +600,7 @@
struct buffer_head *bh;
struct loop_device *lo;
+ set_current_state(TASK_RUNNING);
if (!buffer_locked(rbh))
BUG();
Regards,
Jari Ruusu <jari.ruusu@pp.inet.fi>
-
Linux-crypto: cryptography in and on the Linux system
Archive: http://mail.nl.linux.org/linux-crypto/