Re: fusefs-cryptofs vs fusefs-cryptofs

2010-07-01 Thread Adam Vande More
On Thu, Jul 1, 2010 at 11:14 AM, Tim Gustafson wrote: > > I use file backed GELI fs in this manner. Of course you > > can script it yourself, but I find the ez-jail handles my > > requirements perfectly. > > Thanks, I'll look into using GELI. I think if I do that, I'll have to > mount the file s

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-07-01 Thread Tim Gustafson
> I use file backed GELI fs in this manner. Of course you > can script it yourself, but I find the ez-jail handles my > requirements perfectly. Thanks, I'll look into using GELI. I think if I do that, I'll have to mount the file system in the host environment at boot time so that it can prompt f

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Adam Vande More
On Wed, Jun 30, 2010 at 12:02 PM, Tim Gustafson wrote: > > On FreeBSD, this is spelled GELI (or GBDE, but I think geli is > > slightly better). Native filesystem level encryption -- rather > > more efficient than something like fuse, needs no extra software > > installed, very secure. > > Sorry,

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/06/2010 18:02:25, Tim Gustafson wrote: >> On FreeBSD, this is spelled GELI (or GBDE, but I think geli is >> slightly better). Native filesystem level encryption -- rather >> more efficient than something like fuse, needs no extra software >> ins

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Tim Gustafson
> On FreeBSD, this is spelled GELI (or GBDE, but I think geli is > slightly better). Native filesystem level encryption -- rather > more efficient than something like fuse, needs no extra software > installed, very secure. Sorry, I should have been more specific: This is in the context of a jail

Re: fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/06/2010 17:11:22, Tim Gustafson wrote: > I was wondering if anyone could offer any personal experience with > using either fusefs-cryptofs or fusefs-cryptofs. > > I'm going to be bringing a FreeBSD OpenLDAP server online soon and I > need to ha

fusefs-cryptofs vs fusefs-cryptofs

2010-06-30 Thread Tim Gustafson
Hi, all. I was wondering if anyone could offer any personal experience with using either fusefs-cryptofs or fusefs-cryptofs. I'm going to be bringing a FreeBSD OpenLDAP server online soon and I need to have the contents of the OpenLDAP database encrypted in the event of a physical security bre