BSD 操作系统的开源全盘加密?
任何人都知道相当于全盘加密产品的开源产品,例如 Pointsec(Check Point 产品),如果不提供密码,机器将无法启动?
Anyone aware of an open source equivalent to full disk encryption products such as Pointsec (a Check Point product) where the machine won't boot unless a password is supplied?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
从 此维基百科页面,我看到以下可在 BSD 上使用的磁盘加密方法( FreeBSD 或 NetBSD):
From this Wikipedia page, I see the following disk encryption methods that are can be used on BSD (FreeBSD or NetBSD):
在 FreeBSD 上,您可以加密几乎整个磁盘。 如果要加密包含文件系统根目录的分区,则需要一个未加密的分区来包含
/boot
。在沼泽标准的 FreeBSD 9 安装中,
/boot
大约为 300 MB。 其中大部分是/boot/kernel
,尤其是内核和模块的symbols
文件。参见例如
就我个人而言,除了保存数据的分区之外,我不会费心加密更多内容。 操作系统文件本身并没有什么秘密。
On FreeBSD, you can encrypt almost the whole disk. If you want to encrypt the partition containing the filesystem root, you need an unencrypted partition to contain
/boot
.On a bog-standard FreeBSD 9 install,
/boot
is around 300 MB. Most of that is/boot/kernel
, especially thesymbols
files for the kernel and modules.See e.g. this blog article.
Personally, I wouldn't bother encrypting more than the partition that holds your data. There is nothing secret in the OS files itself.
Truecrypt 支持 Windows、Linux 和 Mac。 它支持全盘加密,尽管它被列为仅 Windows 支持。 显然 存在一些增加对 freebsd 支持的补丁,尽管我不知道这是否包括
全盘加密。
在 Bruce Schneier 对此博客帖子的评论中,除了 Rick Copeland 的答案中已经列出的之外,还提到了以下内容:
或许还有
Truecrypt supports windows, linux and mac. It supports full disk encryption, although that is listed as supported only for windows. There apparently exists some patches that adds support for freebsd, although I do not know if that includes
full disk encryption.
In a comment to this blog post by Bruce Schneier, the following is mentioned in addition to the ones already listed in Rick Copeland's answer:
and maybe