Re: [debian-knoppix] Swapoff -a?
On Wed, May 08, 2002 at 01:54:49PM -0400, Brian Anon wrote:
> Klaus,
>
> I'm thinking that if the Knoppix CD mounts a swap partition as read-write
> during the boot process, there is a risk that any information previously
> stored in the swap partition may be modified. This could compromise the
> integrity of any collected information for forensic analysis.
You are right, I did not think about this possibility before.
What about this: If we boot into a certain runlevel (4 for example),
there is no swap initialization. Or maybe a boot option
"noswap" would be more inituitive. Would this be OK?
-Klaus
--
Klaus Knopper LinuxTag 2002 - Europes largest Linux Expo
Technical Solutions Where .com meets .org
knopper@linuxtag.de http://www.linuxtag.de/
Phone +49-(0)180-5-546898 Fax +49-(0)180-5-546893
_______________________________________________
debian-knoppix mailing list
debian-knoppix@linuxtag.org
http://mailman.linuxtag.org/mailman/listinfo/debian-knoppix
Reply to: