What about crypto filesystem?
Nice idea.. it set me thinkin, i want to have a public key/private key type or just simple encryption. when i compile the kernel, i add a password function that decrypts the file system when finding init. the password must ofcourse itself be encrypted ,but that's tnot the point. i'll encrypt the bootsector, and a few strategic places in the filesystem,so that when the system boots, instead of finding init directly, the kernel supplies the password and decrypts the boot sector and the file system, then finds init and boots. if any one pops a floppy and tyies to boot, without the password from teh kernel, the fs cant be mounted at all. so far it's been my fantaasy.. is it implementable?
Chapter 10 - Encrypting files and drives in Linux, BSD, and other Unices http://www.securityportal.com/research/cryptodocs/basic-book/chapter-10.html The LSKB also covers various options. Not to toot my own horn or anything but most of the questions asked here are answered in stuff I've written that is available on Securityportal.
cheers cheedu
Kurt Seifried SecurityPortal, your focal point for security on the net http://www.securityportal.com/