Re: #342455

[Raul Miller <moth.debian@gmail.com>]

On 2/10/06, Steve Langasek <vorlon@debian.org> wrote:
> ... follow-up to self: given that crypt-dm sits on top of devmapper, it is
> indeed plausible that one would want to prevent members of group disk from
> reading the decrypted volume.

So don't use group disk in that context.

Just because a feature is available doesn't mean it has to be used.  Otherwise,
`chmod -R 777 /` would be a huge security hole.

--
Raul