Re: Wiping Swap Partitions

[Sam Simpson <simpson@samsimpson.com>]

Thanks for the reply Ben,

On Tue, 6 May 2003, Ben Slusky wrote:

> Maybe use shred instead of dd there. Overwriting swap once doesn't do such
> a great job of destroying the data; if you assume that someone's going to
> steal your computer and extract the hard drive then you should assume they
> can get past that. ;-)

My thought was: mostly everyone can steal a hard drive and grep drives for
passwords/intereting data - virtually nobody can take an electron
microscope to the drive.

> Or just use encrypted swap.

Yep, very true...

> > Does anyone know if there is a recommended way of doing this under
> > Solaris? I guess you can do the same kind of thing, but because of the C2
> > rating there should be a way of automating this?
>
> Nah. You must be under the impression that a C2 rating says something
> meaningful about a system's overall security. It doesn't.

I thought C2 mandated object wiping before re-use, but I could be wrong...


Cheers,

Sam

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/