Getting GELI Keys from Floppy

R. B. Riddick arne_woerner at yahoo.com
Thu Sep 7 08:35:43 PDT 2006


--- Jack Barnett <jackbarnett at gmail.com> wrote:
> One idea is having 1 server with a CD-ROM drive and exporting it via NFS.
> When a server boots it mounts the remote CD-ROM drive and looks for key
> "$HOSTNAME.key".
>
But then u would have the problem with network security...

> > On 9/6/06, Barkley Vowk <bvowk at math.ualberta.ca> wrote:
> > > Get a usb flash drive, from there its a simple matter of changing the
> > geli
> > > script to mount a specific usb device before starting. Look in
> > > /etc/rc.d/geli and geli2. I'd put your mounting and checks between the
> > > kldstat and the "if [ -z" in the geli_start() sub.
> >
Oh... I just see Mr. Barkley V. gave an important and helpful hint in this
thread, too... I just wanted to point that out, because it is quite astonishing
after the first few words...

-Arne


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the freebsd-security mailing list