On 29-Jan-98 John Morgan Salomon wrote:
> I'd be interested in hearing what people have to say regarding
> the advisability of storing log or alert files on a firewall
> machine in encrypted/binary format as opposed to plain ascii
> text?
On Linux machines, you can mount and unmount fully encrypted partitions
(encryption done by DES). If this partition is used to log messages in /var/log
or /var/adm, the game can begin.
DES Kernel encryption need a little hack, see the Cryptographis-Filesystems
HOWTO. When your linux boot, you can see this:
..
loop: registered device at major 7
loop: DES encryption available
..
---
Member of the ACM. Look http://www.acm.org
||| | Emmanuel Tychon, <manu @
acm .
org>
O-O | nic-hdl: ET99-RIPE, nic-irc: kosinus
(_) |
oOO-----OOo | Don't be assimilated, use Linux!
| Linux | |
\-------/ | PGP key on http://pgp.ai.mit.edu
|
|