From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ml@mareichelt.com>
Received: from vpn.antaris-organics.com (vpn.antaris-organics.com
	[77.74.199.76])
	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.saout.de (Postfix) with ESMTPS
	for <dm-crypt@saout.de>; Sun, 27 Jun 2010 02:21:07 +0200 (CEST)
Date: Sun, 27 Jun 2010 02:20:48 +0200
From: markus reichelt <ml@mareichelt.com>
Message-ID: <20100627002048.GC10187@pc21.mareichelt.com>
References: <1277553580.29791.40.camel@fermat.scientia.net>
	<20100626125223.GA26185@tansi.org>
	<1277562112.3245.40.camel@fermat.scientia.net>
	<20100626183632.GA30731@tansi.org> <4C2653EB.2090606@redhat.com>
	<1277593981.3239.80.camel@fermat.scientia.net>
	<20100626233458.GC2304@tansi.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="eAbsdosE1cNLO4uF"
Content-Disposition: inline
In-Reply-To: <20100626233458.GC2304@tansi.org>
Subject: Re: [dm-crypt] FYI: how to (really) cleanly shutdown the
	system	when root is on multiple stacked block devices
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
	<mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de


--eAbsdosE1cNLO4uF
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Arno Wagner <arno@wagner.name> wrote:

> Hmm. You know, encrypted root is a problem and pretty difficult to
> do in the rfirt place. Why not just encrypt the critical parts,
> like /var /home /root? The rest only holds binaries and config
> files anyways, which are not that sensitive...

Are you serious?

btw, rfirt? -v please.


--=20
left blank, right bald

--eAbsdosE1cNLO4uF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBAgAGBQJMJplfAAoJEMImmhyPL9kTDpcP/25NZGSZjhxJTMdBBASxiDGu
WTrijPLjRHBwvtuGuy8FjhjFPp3knuDzHPKbnSnG/NzcfAHB2B6yOI1ym/rgeJX3
mTck1lPAy43CVgxc3fWYoEX6N2c7Y/Dp6AjUWLWAVUX9AOnOwfZB4CIbKvgLnpwx
XDpunjh8spGx/8mpQ5VMDNIHFF2dH7ZWaT/ZQkBR1F2btzVLJdGtnsiGRQhJLKP7
WfqVHBBOura8h0aGx1sYCEViPs7jQKi4fSgpqfgHT+QT0q0gktIFkYz865D+YEsa
XoLrpX7/dd930AZVprPVgHtIIILb2M+29L0/15x03VlCSuUrGhb8P7uP0y539cG3
RwyQFevxMKzu76BLGlHORyZEYvROUxLmXOkEItpyK5qDNSShMfvAlkMPWsXCW/dR
oHAD3ykbLZxZoSj8xaT5Ql76B+SMMURYRIXt8aCb8mN8Q3xTV5nowa1Dd5qbbt8X
T5zlBzEm/l9OUj2+HDPh3uno2XvW9TEakQVJmX5L3El4yVfrESqyPiPu6nTJ2btd
InO4oAnkYvxHjVXzx6hQJ1iBBGovOSICo3TxEuRwwuWpHKutVjgKMAfdb90xK/U0
cap0MFenyVwcjVNMALr0BuF+JYFdavKMcdSOvVWxXwGa4RvgOXgk5ow/A6j5KvDL
g66fCcAkXRFQkmb5QXeF
=acAK
-----END PGP SIGNATURE-----

--eAbsdosE1cNLO4uF--