[SLL] is there a good replacement for cfsd?

[Robert Woodcock]

On Tue, Jun 12, 2007 at 12:28:38PM -0700, William Kreuter wrote:
> For many years I've used the Cryptographic File
> System's cfsd daemon.  Under RHEL 4, I've needed to
> use an obsolete version of mount because mount -o
> port=3049, which cfsd requires, no longer works.  
> But since my last up2date not even that workaround
> has been fruitful; cfsd 1.4.1 no longer seems to be
> be 100% conforming.  Its author doesn't seem to have
> maintained it for a few years, I don't think.
> 
> I'm not seeing a good replacement.  Gpgd doesn't
> seem to be supplied with gnugpg, and I can't tell if
> gpgd is supposed to do on-the-fly decryption, which
> is cfsd's whole purpose.
> 
> What non-commercial products will do this?
> 
> And what syntax should one now use to obtain the
> functionality formerly given by mount -o
> port=3049,intr ?

On Debian, I use the loop-aes-utils package's version of mount and losetup,
which have extensions for creating an encrypted file that can in turn be
mkfs'd and mounted as a filesystem.

The package's copyright file says it's from
http://loop-aes.sourceforge.net/, and I'd imagine it's been packaged for
other distributions.
-- 
Robert Woodcock - rcw at blarg.net
"I always make it a point to tell people that 'Halon' is French for
'Exit,' so if they ever get locked in the data center, they know how
to get out."
	-- seen on slashdot