My notes on making encrypted filesystems "Just Work(tm)"

David Zeuthen david at fubar.dk
Wed Dec 15 10:26:14 PST 2004


On Wed, 2004-12-15 at 15:44 +0100, Matthias Urlichs wrote:
> Hi, David Zeuthen wrote:
> 
> > Once the passphrase have been obtained in the desktop session, then
> > 
> >  'sesame-setup --device=/dev/sda1 --passphrase=mysecret22'
> > 
> > should be run by root.
> 
> No it should not. NEVER pass a passphrase in an argument.
> 

Of course not. If you bothered to read through the entire mail you would
find this snippet


> # (note: potentially unsafe to give the passphrase on the commandline
> when
> #        exec'ed from another program)
> #
> 

Have fun,
David

_______________________________________________
hal mailing list
hal at lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/hal



More information about the Hal mailing list