Re: Feitian PKI donation to dm-crypt projetc

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Nov 05, 2010 at 02:48:52PM +0100, Christoph Anton Mitterer wrote:
> On Thu, 2010-11-04 at 06:31 +0100, Jean-Michel Pour?? - GOOZE wrote:
> > I would like to encrypt a whole system using dm-crypt. The problem is
> > that I have to run pcsc prior to mounting partitions. But then pcsc will
> > need access to libraries, which need to be on a mounted partition.
> > 
> > Is there a way around?
> 
> Simply include all required stuff (binaries libraries, etc) in the
> initramfs image.
> 
> The (actually booting) kernel and initramfs image need to be unencrypted
> anyways.
> 
> E.g. Debian brings you nice tools to include something in initramfs
> images + its (library)dependencies (copy_exec).

An alternative would also be a static compile with the library 
functions in the executable. That can be a bit painful to do 
at thimes though and the executable will be pretty large. You
will also need to the the static libraries for that, AFAIK.

Arno
-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier 
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt


[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux