lkml.org 
[lkml]   [2004]   [Aug]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] Masking kernel commandline parameters (2.6.7)

On Sun, 8 Aug 2004, Juergen Pabel wrote:
> ps: in case you're referring to the feature itself, what would be a
> more sensible way of passing sensitive data to the kernel? -I didn't
> see any other way.

Yes, I was referring to the feature itself.

I don't know much about dmcrypt, but in the (similar) case of
loop-encrypt, the initrd program could simply call losetup (or mount
-oloop), which would prompt the user for the key and pass it to the
kernel using the LOOP_SET_STATUS64 ioctl. After the mount, you can
pivot_root to your encrypted fs and get rid of the initrd.

I'm sure you can do something similar for dmcrypt.

Eric
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.048 / U:0.016 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site