26 Jul
2004
26 Jul
'04
09:01
On Sunday 25 July 2004 18.44, Antun Balaz wrote:
And what if the filesystem is encrypted?
-----------8<------------
Mount it the usual way for encrypted systems. I dont use it so i cant tell you how. The actual filesystem isnt relevant. As long as you can access it ok. Just mount it rw and chroot into it.
But if the FS is encrypted with the root-PW you`ve got _real_ trouble.
Correct me if I'm wrong but I'd say "In that case you are cooked!!"
Not that i know much of encrypted FS's, but id say you are pretty lost by then. Unless you can brutecrack the encryption with some forensics software...
Start looking for post-it notes near the console.... Tom.