Re: Support for geli onetime encryption for /tmp?

On Saturday 12 December 2009 23:40:53 Simon L. Nielsen wrote:
> On 2009.12.12 23:07:58 +0100, Daniel Thiele wrote:
> > Is there maybe another way to achieve onetime /tmp encryption that
> > I am missing? Preferably one that does not involve huge changes to
> 
> Well, I use the simple one - make /tmp a memory file system.  locate
> is sometimes not too happy with an e.g. 50MB /tmp, but otherwise it
> works very well for me.
> 
> [simon_at_arthur:~] grep tmp /etc/rc.conf
> tmpmfs="YES"
> tmpsize="50M"

but tmpfs pages are swappable IIRC.  This would mean that the data might end 
up unencrypted on secondary storage.

--
 Max