From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom Vier Subject: Re: secure delete? Date: Tue, 23 Mar 2004 21:36:12 -0500 Message-ID: <20040324023612.GA3880@zero> References: <4060AEB9.1030200@namesys.com> Reply-To: Tom Vier Mime-Version: 1.0 Return-path: list-help: list-unsubscribe: list-post: Errors-To: flx@namesys.com Content-Disposition: inline In-Reply-To: <4060AEB9.1030200@namesys.com> List-Id: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: reiserfs-list@namesys.com someone on l-k recently suggested storing a unique key in the inode. then only the inode needs to be wiped to render all data blocks (including strays) meaningless. i don't know how it was suggested this would be implimented, but i would suggest generating the key at chattr +s time, reading the file, encrypting it, and writing it back. that of course could leave stray data, which is why new files should inherit +s from the dir they're in. (i don't know what the rules are about +s inheritance - maybe it needs chmod g+s on the dir). btw, i wrote a file wiper which does blk and char devs, and regular files. shameless plug: http://wipe.sf.net/ -- Tom Vier DSA Key ID 0x15741ECE