[Mageia-dev] RM replacement

[andre999]

Luis Daniel Lucio Quiroz a écrit :
> Le Dimanche 07 Août 2011 23:03:15 Florian Hubold a écrit :
>> Am 07.08.2011 16:41, schrieb Pierre Jarillon:
>>> Le vendredi 5 août 2011 16:23:19, Florian Hubold a écrit :
>>>> Am 05.08.2011 14:58, schrieb andre999:
>>>>> Colin Guthrie a écrit :
>>>>>> I think srm should just be a tool people use explicitly when they
>>>>>> want
>>>>>> to.
>>>>>
>>>>> When I think about it, deleting with a pattern instead of just zeros
>>>>> is
>>>>> probably only advantageous when a disk is being disposed of -- in
>>>>> which
>>>>> case srm being a userspace tool is not a disadvantage.
>>>>>
>>>>>> Col
>>>>
>>>> Well, if you want to dispose the disk, then i'd use something like
>>>> Dariks>>
>>>>    Boot and Nuke (DBAN):
>>>> http://www.dban.org/
>>>> It offers really secure methods of overwriting your data with varying
>>>>
>>>>    patterns, and if you want to dispose a whole disk. then maybe an
>>>>    userspace tool to delete single
>>>>
>>>> files is not the best suited tool, IMHO.
>>>
>>> Do you know WIPE ? http://wipe.sourceforge.net/
>>> I don't know if it is the most secured rm, but it could be.
>>
>> Yes, and it has the advantage that you don't need to reboot. Good point!
>
> Yes, but more than the tool is how to replace rm command
>
> LD

I think it is useful to question WHY particular files should be securely deleted.

For disposing of a disk, something like DBAN would be an excellent tool.  (WIPE 
seems a little dated, since a lot of disk technology has changed since 2004.)

For individual files, if the particular file should really be securely disposed 
of, then maybe training the users disposing of such files to use srm could be a 
useful approach.  (There would likely be no point in securely deleting most files.)

Then there is always the option of an administrator using srm on items in the 
trash folders on a regular basis.  This could be done automatically by a shell 
script, if desired.

A utility that periodically sanitizes free space could be useful, as well.

Changes in the filesystem or the kernel seems the only reliable way to ensure 
consistantly securely deleting all (or all of a defined subset of) files.

-- 
André