Linux's Security Capabilities

5.2 Notes

• Because of the laws on the exportation of cryptographic material, ciphering capabilities are not part of standard distributions.
  • Official patches are available to add ciphering capabilities to the kernel
  • Patchs are available at <http://www.kerneli.org/> (Norway).
  • A first version has been ported to linux 2.4.0-test2.
    Look at <http://www.kernel.org/pub/linux/kernel/people/astor/v2.4/>

• losetup, mount and umount must be patched to support ciphering capabilities.
  • Patchs for these commandes are given with the kernel patchs.

• A file can be associated to a loopback:
  • create small ciphered partition that can be mounted only when necessary.
  • make secured backup of partitions into ciphered files

Linux's Security Capabilities

® © Hervé Schauer Consultants 2000 - 4 bis, rue de la gare - 92300 Levallois-Perret
Phone : +33 141 409 700 - Fax : +33 141 409 709 - Email : <secretariat@hsc.fr>