GELI on remotely hosted FreeBSD VM

[CyberLeo Kitsana]

On 09/27/2016 09:13 AM, zhaghzhagh at openmailbox.org wrote:
> Hello
> 
> Wonder if there is any security implication with GELI based full disk
> encryption and FreeBSD running on Xen based VM?
<snip>
> In general, would like to have a clearer picture about the effectiveness
> of full disk encryption in case of VM hosted at an 'unknown' physical
> location.

Disk encryption only protects against offline attacks, or certain
attacks on remote storage where the key is nowhere near the storage. If
an attacker has access to the host side of a running or paused VM, it is
equivalent to having physical access to a running machine; there is
little you can do to secure a machine against such an attacker.

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
<CyberLeo at CyberLeo.Net>

Furry Peace! - http://www.fur.com/peace/