From: G. Matthew Rice <[EMAIL PROTECTED]>
> Well, I'm confused.

That's not surprising, because I was riding on the MARTA
(Atlanta's mass transit) when I wrote that on my Blackberry.
After reading someone else's post that Red Hat didn't support
something that Debian, Ubuntu, SuSE, etc... did, I incorrectly
assumed it required FUSE or something.  I've been doing some
FUSE stuff, including some FUSE backports on RHEL 5 for a
client.  I know there are a couple of FUSE-based filesystem
options, including encryption, tunnels, etc...

I did however say Red Hat has been shipping at least 1 option
in RHEL 4/5 in the same post(s) from my Blackberry.

Once I got into the office at my client, I smacked myself in
the forehead.  Why?  Not only does RHEL 5 have LUKS via the
dm-crypt/setup facilities, RHEL 4 has the pre-LUKS facilities
as well.  A few of my colleagues in Red Hat then smacked me
again, especially some of the DM guys, because Red Hat has
been shipping and supporting in RHEL for over 3 years, and
Fedora for almost 5.

So feel free to smack me as well.  That's what I get for:  
A)  Using my Blackberry when I've got time to kill
B)  Trying not to assume/defend Red Hat by default

> It looks like LUKS is going to be it.  I've added an
> objective for it (with some details):
> https://group.lpi.org/publicwiki/bin/view/Examdev/LPIC-303#320_3_Encrypted_Filesystems_weig
> Can everyone take a look at see what you think?  I put in
> LUKS, dm-crypt and cryptmount.
> I didn't add anything to do with FUSE, sshfs, etc,
> though.  Anyone want to argue for those?

Any security exam should build on other foundation.  So
consider adding the DeviceMapper foundation into other
exams, like LPIC-1/2 for the next revision.  Although if
security-centric, yeah, it's a consideration.


-- 
Bryan J Smith        Professional, Technical Annoyance
[EMAIL PROTECTED]  http://www.linkedin.com/in/bjsmith
------------------------------------------------------
I'm a PC, but Linux -- Windows: Life Without Firewalls



_______________________________________________
lpi-examdev mailing list
[email protected]
http://list.lpi.org/cgi-bin/mailman/listinfo/lpi-examdev

Reply via email to