Committing PEFS to CURRENT

Julian H. Stacey jhs at berklix.com
Mon Oct 7 19:58:40 UTC 2013


Hi Gleb & All
Gleb Kurtsou wrote:
> Hello,
> 
> I would like to ask everybody's opinion regarding committing PEFS to
> CURRENT.
> 
> PEFS is a stacked cryptographic file system for FreeBSD. Development
> started as Google Summer of Code project in 2009. It has been in ports
> since Sept 2011. I maintain the project.
> 
> Conceptually PEFS is similar to nullfs adding encryption layer on top of
> it. But it differs technically by not using vop_bypass. Another popular
> stacked cryptographic file systems include eCryptfs (linux) and encfs
> (fuse). There is also pam_pefs pam module to allow user authentication
> with their PEFS-encrypted home directory password.

2 others are also already in FreeBSD src/ (not just ports) gbde & geli.

Whether moved from ports to src or not, either way,
I sggest add to man section SEE ALSO gbde(8) & geli(8)

Also, SEE ALSO of gbde & geli should probably ref ports/sysutils/pefs-kmod
ft: Command not found.

No pefs yet i SEE ALSO of
http://www.freebsd.org/cgi/man.cgi?query=gbde&apropos=0&sektion=8&manpath=FreeBSD+9.2-RELEASE&arch=default&format=html
http://www.freebsd.org/cgi/man.cgi?query=geli&apropos=0&sektion=8&manpath=FreeBSD+9.2-RELEASE&arch=default&format=html

I suggest add an href inside:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/disks-encrypting.html
Even if just a 1 liner to start, to expand to a section later.
(None there for 'pefs', I just searched)

Personaly I've been using gbde based on top of a file inside a UFS
for a long time, I can't remember why I chose gbde rather than geli,
I guess because it was there first ?

A dummy's guide short notes along the lines of "Which of these 3 should I use?"
might also later be nice at the top of that web page :-)

Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultant, Munich http://berklix.com
 Reply below not above, like a play script.  Indent old text with "> ".
 Send plain text.  No quoted-printable, HTML, base64, multipart/alternative.


More information about the freebsd-current mailing list