GELI -> What to encrypt?

[Pawel Jakub Dawidek]

On Wed, Feb 08, 2006 at 01:20:00AM +0100, Christian Baer wrote:
+> Hi folks!
+> 
+> This question may seem a little strange, but don't hit me yet. :-)
+> 
+> I was just sitting here wanting to set up a new GELI-device when it
+> struck me: What should I encrypt exactly. If I were to use GBDE, the
+> usual concept is to encrpyt (only?) the actual partition ad2s1d. GELI
+> suggests to encrypt all of ad2. I guess I could partition the
+> pseudo-device then. Would I get something like ad2.gelis1d?
+> 
+> Does this have any advantages oder just encrypting the partition and if
+> so how important are these?

GELI, just like GBDE or any other GEOM class can work on _any_ GEOM
provider (disk, slice, partition, mirror, etc.).

Because this is the second such question I'm seeing, I'll probably add a
note to the manual page.

-- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd at FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-geom/attachments/20060208/e5a2d9a2/attachment.bin