Automatic Geli?

RW rwmaillists at googlemail.com
Tue Apr 10 22:14:36 UTC 2012


On Mon, 9 Apr 2012 18:34:10 +0000
Fa bio wrote:

> Is it possible to recompile geli/kernel to automatically enter with
> password and/or key? 

If that's done you no longer have encryption, you have obfuscation,
with the option to reinstate encryption. 

> If you see a cache system called SpeedR
> (http://www.speedr.com.br/?locale=en), in their site you can download
> the ISO and burn it to a CD
> (http://www.speedr.com.br/rc/speedr-0...rc18.2-x64.iso)
> 
>  
> It´s very interesting, because all partitions are encrypted with
> Geli, but there is no passphrase to enter at boot time or key
> directions in loader.conf file.
> ... 
> How is it possible?

I think the more important question is why. I don't see a good reason
for encrypting caching software, except maybe as part of a scheme for
enforcing  their licensing.


More information about the freebsd-geom mailing list