Postings
Linux Files System Encryption
Encryption of files on a server is often the last gate in keeping unauthorized users from gaining access to sensitive data. File-level encryption is prevalent with tools like PGP. Unfortunately file-level encryption still exposes the OS structure of a server to the hacker. Plus, managing the encryption/decryption of individual files can be expense from a system resource perspective. An alternative would be to encrypt the entire file system and perform the encryption/decryption at the file system level on the fly.
With the introduction of disk encryption on Cisco WAAS 4.0.13 I decided to dig in a little bit into linux file system encryption and see how that’s usually done in the open source community.
For the linux kernel jockies, the Linux Documentation Project spells out a step-by-step process to recompile your linux server’s kernel and setting it up to support disk encryption. For those that simply want to review the various approaches to encrypting disk w/ Linux, this page lists out tools like CryptFS, StegFS, and Virtual Private Disk.
Filed under: Uncategorized — Tags: disk, encryption, linux, pgp, waas — appgirl @ 8:25 pmComments (0)
No Comments »
No comments yet.
RSS feed for comments on this post. TrackBack URL
Leave a comment
About
My name is Catherine Liao and you're reading the latest postings of various blogs I follow. You'll notice that the topics tend to center around Cloud Computing, Data Center, Virtualization, Servers, Web Technologies and 24x7 Operations.
These are topics that I'm interested in as I've spent a large chunk of my professional career building, deploying, and maintaining 24x7 application delivery environments. I use the knowledge I've garnered daily in my role as a Technology Solutions Architect for Cisco. I should note that this site is my personal site and does not reflect the views of Cisco.
Feel free to drop me a note if you find this site useful or if you'd like for me to check out your blog. I can be reached at catherine.liao@gmail.com. You can also connect with me via LinkedIn or Twitter.
Looking for less "geeky" content? Check out my travel blog 1-Day Itinerary.