I've been searching Google for ext3 and have a couple of questions about it in terms of its security.
1. Where is the journal file, and what does it log? i.e. if I rename a file, does the journal log that "file xxx was renamed to yyy"? Or, if I change the file's contents, does it log "file yyy used to have this content: ... now it has this: ..."
If the journal logs too much information about a file like that, it would be a whole other security concern in itself (like, you'd "securely delete" a file, but the log would still have what used to be in the file).
If the journal does store a whole lot of information, is there a way to blank out the journal, or reset it?
2. A few articles about ext3 mention that deleted files are very difficult to recover. Does it write zeroes over the file's contents on the disk, or just to the pointers on each block so that the file system couldn't link one end of the file to the other?
Is there a utility that could fill up the entire, unlinked portion of the hard drive, wiping out any loose "deleted file data" that isn't currently linked to an existing file?
Thanks in advance.
-------------
Cuvou.com | My personal homepage
Project Fearless | My web blog
1. Where is the journal file, and what does it log? i.e. if I rename a file, does the journal log that "file xxx was renamed to yyy"? Or, if I change the file's contents, does it log "file yyy used to have this content: ... now it has this: ..."
If the journal logs too much information about a file like that, it would be a whole other security concern in itself (like, you'd "securely delete" a file, but the log would still have what used to be in the file).
If the journal does store a whole lot of information, is there a way to blank out the journal, or reset it?
2. A few articles about ext3 mention that deleted files are very difficult to recover. Does it write zeroes over the file's contents on the disk, or just to the pointers on each block so that the file system couldn't link one end of the file to the other?
Is there a utility that could fill up the entire, unlinked portion of the hard drive, wiping out any loose "deleted file data" that isn't currently linked to an existing file?
Thanks in advance.
-------------
Cuvou.com | My personal homepage
Project Fearless | My web blog