Received: by 10.114.123.1 with SMTP id v1mr584630wac.1.1235804283625;
        Fri, 27 Feb 2009 22:58:03 -0800 (PST)
Return-Path: <arvin...@gmail.com>
Received: from rv-out-0708.google.com (rv-out-0708.google.com [209.85.198.243])
        by mx.google.com with ESMTP id m37si13845129waf.2.2009.02.27.22.58.02;
        Fri, 27 Feb 2009 22:58:02 -0800 (PST)
Received-SPF: pass (google.com: domain of arvin...@gmail.com designates 209.85.198.243 as permitted sender) client-ip=209.85.198.243;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of arvin...@gmail.com designates 209.85.198.243 as permitted sender) smtp.mail=arvin...@gmail.com; dkim=pass (test mode) header...@gmail.com
Received: by rv-out-0708.google.com with SMTP id c5so1585850rvf.16
        for <acme-sac@googlegroups.com>; Fri, 27 Feb 2009 22:58:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        bh=qRBOaAvhoQhZGe+omV6h+EY4n6RZ/tKv5z+r4Xk1Eto=;
        b=NH2u38b4nmC4AAerUTULKDMHaw0fdlq6N2zcWMSmLaATZ0/aJX2f4L9SnPABgHCHyI
         FOeCtiEVJtcy0lCxTHVSVNC2oAb7qO5+CNO5wDLnjhARBvobmfvADeTCvNU6K/objSuS
         J6l3lM+RKgDclEVZnTIa/+7yDvj/VhJnr+RQo=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=ELh8m+fAtVdzycFeWtMt5F+L16aTm9lqEFtKs6NpXXDCeODrKxd0xCxrZM5+Gg0mQ9
         WP1aMxD29n9bAG7M0UG/ufxeJUI1KtUMyuNCSXJ1UIdkkxmjF7FVwyA8HEYFpgZqCuGw
         GPb0vHZ9SsGZr6JGKVr0h9eKr9d4wHA61JktY=
MIME-Version: 1.0
Received: by 10.140.174.20 with SMTP id w20mr1638517rve.87.1235804282573; Fri, 
	27 Feb 2009 22:58:02 -0800 (PST)
In-Reply-To: <91CB7985-4D06-4C13-BD0F-517634F03B20@gmail.com>
References: <E4CC05C1-3A2E-494B-A9CE-9294A137E493@gmail.com>
	 <c4a46c570902272137n2e84baa5p7a636b41fb937c39@mail.gmail.com>
	 <91CB7985-4D06-4C13-BD0F-517634F03...@gmail.com>
Date: Sat, 28 Feb 2009 12:28:02 +0530
Message-ID: <c4a46c570902272258r66a4ae13s73b84ea134923...@mail.gmail.com>
Subject: Re: [acme-sac] Re: Encrypted file system in hosted Inferno?
From: Arvindh Rajesh Tamilmani <arvin...@gmail.com>
To: acme-sac@googlegroups.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

> Pipefs doesn't quite do enough - the names of the themselves files are
> sensitive.
>
> Encrypting the kfs file would suffice, but for the hassle of
> encrypting/decrypting each session.

after creating a kfs(4) file, mounting it in $home/lib/profile works for me.

                   mount -c {disk/kfs -n secretfs /host/kfs/file}
/n/encrypted-fs
                   (pipefs -c -r 'crypt -d -k keyfile'
                       -w 'crypt -k keyfile'
                       /n/encrypted-fs /n/decrypted-fs)

at the end of the profile, the file systems may need to be
unmounted / synced (disk/kfscmd -n secretfs sync).

arvindh