Messages in this thread | | | Date | Wed, 14 May 2003 12:38:54 -0400 (EDT) | From | Ahmed Masud <> | Subject | Re: encrypted swap [was: The disappearing sys_call_table export.] |
| |
On Wed, 14 May 2003, [iso-8859-1] Jörn Engel wrote:
> On Wed, 14 May 2003 12:13:03 -0400, Ahmed Masud wrote: > > > > The idea is to have encryption keys for the pages to be unique on a > > per-uid per-process basis. So one user on the system cannot access (even > > if they are root) parts of another's private data. To achieve this, > > different parts of swap device need to be encrypted with different keys. > > How do user *know* that root cannot simply bypass this security? > > Root, god, what's the difference? ;-) > > Jörn
Well :-) that's sorta true. In the new world the old gods will fall to give rise to new ones. worshippers of root will fade in the echos of the past ... Rootshunting is possible if the kernel so chooses. Trusted Linux, which is my perosnal and favourite focus for linux would be an environment without root.
Ahmed.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |