On 09/27/2016 09:13 AM, zhaghzh...@openmailbox.org wrote: > Hello > > Wonder if there is any security implication with GELI based full disk > encryption and FreeBSD running on Xen based VM? <snip> > In general, would like to have a clearer picture about the effectiveness > of full disk encryption in case of VM hosted at an 'unknown' physical > location.
Disk encryption only protects against offline attacks, or certain attacks on remote storage where the key is nowhere near the storage. If an attacker has access to the host side of a running or paused VM, it is equivalent to having physical access to a running machine; there is little you can do to secure a machine against such an attacker. -- Fuzzy love, -CyberLeo Technical Administrator CyberLeo.Net Webhosting http://www.CyberLeo.Net <cyber...@cyberleo.net> Furry Peace! - http://www.fur.com/peace/ _______________________________________________ freebsd-geom@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-geom To unsubscribe, send any mail to "freebsd-geom-unsubscr...@freebsd.org"
