Hello,

I have a darcs repository replicated on a few encrypted volumes. I would not like the data in this repository to ever be stored unencrypted, except in RAM. I have noticed that there are a few times when darcs stores the data in unencrypted parts of my filesystem:

- Patches and other things are stored under ~/.darcs/cache. For now, I've stopped this by creating a regular file at ~/.darcs/cache on all of my hosts, preventing the directory from being created. - Data is stored temporarily under DARCS_TMPDIR. I plan to address this by making DARCS_TMPDIR point to an encrypted or RAM-only volume.

Questions: Are there any other leaks I should plug? Is there a better approach? Is this a hopeless pursuit, and if so, would it still be hopeless if my whole filesystem were encrypted instead of just the places where I keep my repositories?

Thanks for your time!

Please CC me in replies; I am not subscribed to this list.

James

james glider ~ $ uname -a
Linux glider 2.6.32-5-amd64 #1 SMP Fri Sep 9 20:23:16 UTC 2011 x86_64 GNU/Linux
james glider ~ $ darcs --version
2.4.4 (release)


_______________________________________________
darcs-users mailing list
[email protected]
http://lists.osuosl.org/mailman/listinfo/darcs-users

Reply via email to