Booting a GELI encrypted hard disk

Fabian Keil freebsd-listen at fabiankeil.de
Wed Oct 10 11:18:53 PDT 2007


Roland Smith <rsmith at xs4all.nl> wrote:

> On Wed, Oct 10, 2007 at 09:04:34AM -0400, Steve Bertrand wrote:

> > I am voraciously attempting to get a FreeBSD system to boot from a GELI
> > encrypted hard disk, but am having problems.
> 
> You don't need to encrypt the whole harddisk. You can encrypt separate
> slices. There is no need to encrypt stuff like / or /usr; what is there
> that needs to be kept secret?

Encryption isn't only useful for private data,
it also reduces the risk of third parties replacing
your binaries with Trojans while your away.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20071010/ef23289b/signature.pgp


More information about the freebsd-questions mailing list