summaryrefslogtreecommitdiffstats
path: root/sbin/gbde/template.txt
diff options
context:
space:
mode:
authorphk <phk@FreeBSD.org>2002-10-20 11:16:13 +0000
committerphk <phk@FreeBSD.org>2002-10-20 11:16:13 +0000
commit7748521fbcda032a04350fddb6676e01085668bd (patch)
tree1565b3d36c81147a1efa162ea3acccd662675e60 /sbin/gbde/template.txt
parent9c61841d19004e25f56b1614e189c3d788de7154 (diff)
downloadFreeBSD-src-7748521fbcda032a04350fddb6676e01085668bd.zip
FreeBSD-src-7748521fbcda032a04350fddb6676e01085668bd.tar.gz
Complete the Geom Based Disk Encryption: Add the OAM utility.
Sponsored by: DARPA and NAI Labs
Diffstat (limited to 'sbin/gbde/template.txt')
-rw-r--r--sbin/gbde/template.txt32
1 files changed, 32 insertions, 0 deletions
diff --git a/sbin/gbde/template.txt b/sbin/gbde/template.txt
new file mode 100644
index 0000000..3d22007
--- /dev/null
+++ b/sbin/gbde/template.txt
@@ -0,0 +1,32 @@
+# $FreeBSD$
+#
+# Sector size is the smallest unit of data which can be read or written.
+# Making it too small decreases performance and decreases available space.
+# Making it too large may prevent filesystems from working. 512 is the
+# minimum and always safe. For UFS, use the fragment size
+#
+sector_size = 512
+
+#
+# Start and end of the encrypted section of the partition. Specify in
+# sector numbers. If none specified, "all" will be assumed, to the
+# extent the value of this can be established.
+#
+#first_sector = 0
+#last_sector = 2879
+#total_sectors = 2880
+
+#
+# An encrypted partition can have more than one key. It may be a good idea
+# to make at least two keys, and save one of them for "just in case" use.
+# The minimum is obviously one and the maximum is 4.
+#
+number_of_keys = 4
+
+#
+# Flushing the partition with random bytes prevents a brute-force attack
+# from skipping sectors which obviously contains un-encrypted data.
+# NB: This variable is boolean, if it is present it means "yes" even if
+# you set it to the value "no"
+#
+#random_flush =
OpenPOWER on IntegriCloud