Kernel Source Divergence, Security (was: booting gbde-encrypted filesystem)

[Nick Evans]

On Sun, 31 Jul 2005 16:07:27 +0200
"Poul-Henning Kamp" <phk at phk.freebsd.dk> wrote:

> In message <20050731135919.GA43753 at afields.ca>, Allan Fields writes:
> 
> >Yes, this is all very nice, but when is someone actually going to
> >commit it? ;)
> 
> I'm (as always) short of time, and GBDE is not the top priority
> for me for the time being.
> 
> So I am more than happy to see people band together and improve
> gbde.
> 
> The main work necessary is to polish the userland program and that
> is relatively trivial programming, so anyone should be able to pick
> that up: just go for it.
> 
> Giving gbde a taste function so that the root filesystem can be
> protected by GBDE, this is also OK by me in principle, but I'd like
> to review the patch before it gets committed because there are a
> large number of dragons.
> 
> In P4:phk_gbde there is the beginning of hw-crypto support through
> opencrypto(9), if somebody wants to work on that, get in touch with
> me.
> 
> -- 
> Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
> phk at FreeBSD.ORG         | TCP/IP since RFC 956
> FreeBSD committer       | BSD since 4.3-tahoe    
> Never attribute to malice what can adequately be explained by
> incompetence. _______________________________________________
> freebsd-geom at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-geom
> To unsubscribe, send any mail to "freebsd-geom-
> unsubscribe at freebsd.org"
> 

I can do testing on the hardware crypto backed gbde stuff if anyone
needs it. I've got a few Soekris boards I've been waiting to try out
with gbde.

Nick