Gentoo Archives: gentoo-security

From: Manfred Knick <Manfred.Knick@××××××××.de>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Encrypted filesystem
Date: Mon, 26 Apr 2004 09:44:07
Message-Id: 200404261142.38728.Manfred.Knick@T-Online.de
In Reply to: Re: [gentoo-security] Encrypted filesystem by Calum
1 Thanks, Bart, for your precise clarification!
2 So I can skip that ...
3
4
5 Am Monday 26 April 2004 11:11 schrieb Calum:
6 > On Monday 26 April 2004 09:41, Sven Vermeulen wrote:
7
8 > What would happen if there was a bit of file corruption
9 > near the beginning of the tape -
10 > would that make the remaining data useless?
11
12 Short: Better assume "Yes".
13
14 Long:
15
16 This is not a point correlating to encryption at all !
17 Not even specific to tape etc. ...
18
19 Even if you just use tar plain to <medium>,
20 if the beginning of the recording gets corrupted,
21 no matter by which reason at all,
22 during restore you probably get some ERROR like
23 "This doesn't seem to be a valid TAR archive".
24
25 As Sven Vermeulen already pointed out the mail before:
26 "You ALWAYS have to assume the worst".
27 So just take this serios and
28 evaluate the Backup- / Restore-chain as a whole !
29
30 - Do your backup along your whole chain.
31 - Do the verify of the resulting Backup the same way.
32 - Do a Restore onto a different disk.
33 - Compare thoroughly if the Restore really matches your Source.
34
35 Evaluate the amount of trust you can put into your media over time !
36 Using Tapes:
37 Do the above more than once,
38 evaluating different instances / types of your cartridges.
39
40 And the whole other business of little 1 x 1 in Backup
41 (Decide upon frequencies, complete / incremental mix, ...)
42
43 Otherwise: May the trust into hope never fail you ...
44
45 Manfred

Replies

Subject Author
Re: [gentoo-security] Encrypted filesystem Manfred Knick <Manfred.Knick@××××××××.de>