From: Eric Lammerts <eric@lammerts.org>
To: Juergen Pabel <jpabel@akkaya.de>
Cc: linux-kernel@vger.kernel.org
Subject: Re: [PATCH] Masking kernel commandline parameters (2.6.7)
Date: Sun, 8 Aug 2004 12:14:30 -0400 (EDT) [thread overview]
Message-ID: <Pine.LNX.4.58.0408081204270.7223@vivaldi.madbase.net> (raw)
In-Reply-To: <200408081430.59840.jpabel@akkaya.de>
On Sun, 8 Aug 2004, Juergen Pabel wrote:
> ps: in case you're referring to the feature itself, what would be a
> more sensible way of passing sensitive data to the kernel? -I didn't
> see any other way.
Yes, I was referring to the feature itself.
I don't know much about dmcrypt, but in the (similar) case of
loop-encrypt, the initrd program could simply call losetup (or mount
-oloop), which would prompt the user for the key and pass it to the
kernel using the LOOP_SET_STATUS64 ioctl. After the mount, you can
pivot_root to your encrypted fs and get rid of the initrd.
I'm sure you can do something similar for dmcrypt.
Eric
next prev parent reply other threads:[~2004-08-08 16:14 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-08-08 2:12 Juergen Pabel
2004-08-08 2:44 ` Eric Lammerts
2004-08-08 11:21 ` Juergen Pabel
2004-08-08 12:30 ` Juergen Pabel
2004-08-08 16:14 ` Eric Lammerts [this message]
2004-08-10 0:12 ` Juergen Pabel
2004-08-08 20:44 ` Andrew Morton
2004-08-10 0:12 ` Juergen Pabel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.58.0408081204270.7223@vivaldi.madbase.net \
--to=eric@lammerts.org \
--cc=jpabel@akkaya.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®