Sophie: howto-text-ja-2006-5mdv2010.0 noarch

howto-text-ja-2006-5mdv2010.0.noarch.rpm

  Loopback Encrypted Filesystem HOWTO
  Copyright by Ryan T. Rhea, rhear@cs.winthrop.edu
  v1.1, 29 November 1999
  Linux JF Project JF@linux.or.jp
  v1.1, 30 November 1999

  ±Ì¶ÍC[Uª}Egµ½Æ«ÉC»Ìàeð®I©Â§ßIÉÃ
  »·ét@CVXeÌÝèû@Ægpû@ðà¾µÜ·D±Ìt@CV
  XeÍÊít@CÌÉu©êéÌÅCBµt@CÉµ½èÚ§½È¢
  ¼Oðt¯½èµÄCÙÆñÇ©Â©çÈ¢æ¤É·é±ÆªÅ«Ü·D±Ì
  û@ÉæèCf[^ðñíÉÀSÉÛ·é±ÆªÂ\Å·D
  ______________________________________________________________________

  Ú

  1. nßéOÉ
  2. Í¶ßÉ
  3. èÌÜÆß
  4. Ú×Èè
  5. ú{êóÉÂ¢Ä

  ______________________________________________________________________

  1.  nßéOÉ

  ±Ìðs¤ÉÍJ[lÌ\[XR[hCJ[lÌRpCÉÖ·é
  m¯C»ê©ç©ÈèÌªCªKvÅ·DN®fBXNðpÓµÄ¨±Æð
  MÒÍ¨©ßµÜ·DÜ½CdvÈf[^ðÃ»µ½t@CVXeÉÚ
  ·OÉÍCK¸obNAbvðæÁÄ¨«Üµå¤D¼Ìt@CVXeÆ
  ¯lÉóêé©àµêÈ¢©çÅ·D

  Ü¸ÅÉCLinux J[lÉpb`ðÄÄo[WðÈÆà 2.2.9
  ÈãÉµÄ¨©È¯êÎÈèÜ¹ñDpb`ðÄéÚµ¢èÍC±Ì¶
  Ì``Ú×Èè''ÌßÅãqµÜ·D

  J[lÌ\[XR[hÍÈºÌêÉ èÜ·:

       <ftp://ftp.kerneli.org/>

  J[lÌÄRpCèÉÖ·é HOWTO ¶ÍÈºÌê©çüèÅ«
  Ü·:

       <http://metalab.unc.edu/LDP/HOWTO/>

  {¶ÌSÌÜ½ÍêÍCÈºÌðÌºÉ¨¢ÄC³¿Å¡»EzzµÄ
  à©Ü¢Ü¹ñD

  o  {¶ÌSÌ é¢ÍêðRs[µ½êÍCì \¦Æ±Ìø\
     ¦ðc³È¯êÎÈèÜ¹ñD

  o  |óÜ½Íh¶¨ÉÂ¢ÄÍCzzðs¤OÉÒÌ³FªKvÅ·D

  o  {¶Ìêªðzz·éêÉÍC{¶Ì®SÈÅðüè·éèð
     ÜßÈ¯êÎÈèÜ¹ñDÜ½C®SÈÅð¾éèiðñµÈ¯êÎÈ
     èÜ¹ñD

  o  {¶É©ê½SÄÌ\[XR[hÍ GNU General Public License É
     ]¢Ü·D±ÌCZXÍÈºÌê©ç anonymous FTP ðgÁÄüè
     Å«Ü·:
       <ftp://prep.ai.mit.edu/pub/gnu/COPYING/>

  2.  Í¶ßÉ

  ¡ñÌìÆÅÍC`/dev/loop*' foCX(ÊÉCXg[µÄ¢êÎ *
  Í 0 ©ç 7 ÜÅÅµå¤)ðgÁÄ[vobNt@CVXeð}E
  gµÜ·D±ÌìÆÍÃ»ðp¢¸És¤±ÆàÅ«CLinux t@CVX
  eð Linux ÈOÌp[eBVÉu±ÆªÅ«Ü·D±êÉÂ¢Äq
  ×½ HOWTO ¶ªÈOÍ LDP É èÜµ½D

  ½íÞ©ÌÃðg¦Ü·Dá¦Î XOR, DES, twofish, blowfish, cast128,
  serpent, MARS, RC6, DFC, IDEA ÈÇÅ·DÃ»³ê½t@CÆC»Ì
  ÉÜÜêét@CVXeâÃÌíÞðÖAt¯éÌÍ `losetup'
  (loopback setup)vOÌðÅ·D kerneli.org ÆÛÅÌ crypto
  pb`ðÇµÄ¢é Alexander Kjeldaas ÉæéÆC»ÝÍ DES Æ
  losetup ÍgÝí¹çêÜ¹ñD±êÍ¼ÒÉ¨¯épeBrbgÌµ¢
  ªÙÈé½ßÅ·DDES Í¼ÌÃÆä×ÄÀS«ª¸ÁÆòéÌÅCDES ð
  T|[g·évæÍ èÜ¹ñD

  Twofish, blowfish, cast128, serpent ÍCÚIðâí¸É©RÉg¦éC
  ZXÅ·D¼ÍCZXÉ§Àªs¾Å·D±êçÌ¢Â©ÍCAES W
  ÌóâÅ·DÅIIÉ¿cÁ½ÃÍCgp¿ÈµÅ¢EÅg¦éæ¤
  ÉÈéÅµå¤D

  {¶ÅÍ serpent ASYðpµÜ·DÈºÈçC±ÌÃÍx
  ª¢ãÉÉßÄ¬ÅC©Â GPL ÌºÅ©RÉzzÅ«é©çÅ·D
  serpent t®Ì¶ÉæéÆCserpent Í Ross Anderson, Eli Biham, Lars
  Knudsen ªÝvµ½ 128 rbgubNÌÃðgÁÄ¢Ü·D±ÌÃ
  ÍC²¯¹ðgÁ½UªÈ¢±ÆðÀpÅÌxÅÛØµÄ¢Ü·D
  serpent ÉÖ·é¶Æ\[XR[hÍÈºÌê©çüèÅ«Ü·:

       <http://www.cl.cam.ac.uk/~rja14/serpent.html>

  Ü½{¶ÅÍCÃ»Ì@\Í¼ÚJ[lÉgÝÜêéàÌÆµÜ·D
  ±êÍW[ÆµÄàCXg[Å«Ü·ªC»Ìû@Í{¶ÅÍà
  ¾µÜ¹ñD`/etc/conf.module' t@CðÒW·éKvª éÅµå¤D
  ±ÌèÍCæÉq×½J[lÌRpCÉÖ·é HOWTO ¶ÅÚµ
  à¾³êÄ¢Ü·D

  3.  èÌÜÆß

  ìÆÍ¢Â©Ìè©çÈèÜ·D»ê¼êÌèÉÂ¢ÄÍCÌß
  ``Ú×Èè''Åà¾µÜ·Dt@XÆµÄÜÆßðÅÉpÓµÄ¨
  Æ¢¢¾ë¤Æl¦Üµ½ (àµÇÒÌF³ñÌ UNIX/Linux Ìo±ªLx
  ÈçÎC¢¸êÉ¹æ×©¢à¾ÍsvÅµå¤)DÅÍCÜÆßðÈºÉ¦
  µÜ·:

  1. ÛÅÃpb`ÌÅVÅðÈºÌê©ç_E[hµÜ·({¶Ì
     ·M_ÅÍ `patch-int-2.2.10.4' ðp¢Üµ½):

       <http://ftp.kerneli.org/pub/kerneli/>

  2. J[lÉpb`ðÄÜ·

  3. `make config'(Ü½Í `menuconfig' â `xconfig')ðÀsµÄCVµ¢J
     [lpÌ `Makefile' ðÝèµÜ·DÃ»ðLøÉ·é½ßÌIv
     VÍC ¿±¿ÉUçÎÁÄ¢Ü·DÜ¸ÍÆà©CÇÌIvV
     æèàOÉ `Code Maturity level options' ÌºÌ `Prompt for
     development and/or incomplete code/drivers' ðLøÉµÄ¾³¢D
     ÉC`Crypto options' ÌºÌ `crypto ciphers' Æ `serpent' ðLø
     ÉµÜ·DJèÔµÜ·ªC{¶ÅÍ serpent ðg¤àÌÆµÜ·DÅ
     àCÇÒÌF³ñÍD«ÈàÌðµÄ¾³¢D½¾µ 2.2.10.4 Ì
     _ÅÍ DES ÆÍgÝí¹çêÈ¢±ÆðYêÈ¢Å¾³¢D¡ãàÜ
     ¸T|[g³êé±ÆÍÈ¢Åµå¤D`Block Devices' ÌºÉÍCIð
     ·×«dvÈIvVª¢Â© èÜ·D `Loopback device
     support', `Use relative block numbers as basis for transfer
     functions(RECOMMENDED)', `General encryption support' Å·D±±Å
     Í `cast 128' â `twofish' ÍIðµÈ¢Å¾³¢Dlbg[NÖA
     ÌeíÚÌºÉ éÃÖWÌIvVÍCÇêàIð·éKvÍ 
     èÜ¹ñDJ[lÌÝèÉÂ¢ÄÍC±êÈã×©¢ªÉÍ§¿üè
     Ü¹ñD±êÍ{¶ÌçõÍÍÅÍÈ¢ÌÅCLDP ÌTCgÉ é¼Ì
     ¶ð²ÉÈÁÄ¾³¢D

  4. Vµ¢J[lðRpCµÜ·D

  5. `/etc/lilo.conf' ðÒWµÄCVµ¢J[lC[WðÇÁµÜ·D»
     ê©ç `lilo -v' ðÀsµÄCu[g[_É±ÌJ[lðÇÁµÜ
     ·D

  6. ÅVÌ `util-linux' pbP[W(MÒÍ `util-linux-2.9v' ðgÁÄ¢
     Ü·)ðÈºÌê©çüèµÜ·:

       <ftp://ftp.kernel.org/pub/linux/utils/util-linux/>

  7. `util-linux' Ì\[XðWJµÜ·D

  8. [JÌ `/usr/src/linux/Documentation/crypto/' fBNgÉ 
     éCg¢½¢ÃÉÎ·épb`ðÄÜ·D

  9. `INSTALL' t@CðÓ[ÇñÅ¾³¢! ±ÌpbP[WÉÍCV
     XeË¶Ìt@C(`login', `passwd', `init' Æ¢Á½dvÈc[
     Q)Ì\[XR[hª½³ñüÁÄ¢Ü·D MCONFIG t@Cð¢¢Á
     ¸ÉÒWµÄ±êçÌ\[XðRpCµÄµÜ¤ÆCVXeªß
     ¿á¿áÉÈé©àµêÜ¹ñ - N®fBXN©VbgKðpÓµ
     Ä¨«Üµå¤Dî{IÉÍCÙÆñÇSÄÌ `HAVE_*' ÌÚð `yes'
     ÉµÄ¨«CdvÈFØc[ÌRpCÆã«ªsíêÈ¢æ¤É
     µÄ¨«Üµå¤DÄ\zÌKvª éc[ÍCVµ¢Ã»è@ÉÎ
     ³¹é `mount' Æ `losetup' Å·D±ÌXebvÉÂ¢ÄÍCãqÌ
     ``Ú×Èè''ÌßðQÆ·é±Æð¨©ßµÜ·D

  10.
     `util-linux' Ì\[XÌRpCÆCXg[ðs¢Ü·D
  11.
     Vµ¢J[lÅ}VðÄN®µÜ·D

  12.
     `/etc/fstab' ðÒWµCÈºÌæ¤È}Eg|CgÌÚðÇÁµÜ
     ·:

       ______________________________________________________________________
       /dev/loop0  /mnt/crypt  ext2  user,noauto,rw,loop 0 0
       ______________________________________________________________________

  13.
     t@CVXeð}Eg·é½ßÌfBNgðìèÜ·DãLÌ
     áÅÍ `/mnt/crypt' Å·D

  14.
     êÊ[U ÀÅCÃ»·ét@CðÈºÌæ¤ÉµÄìèÜ·:

       dd if=/dev/urandom of=/etc/cryptfile bs=1M count=10

  15.
     ÈºÌæ¤É losetup ðÀsµÜ·:

       losetup -e serpent /dev/loop0 /etc/cryptfile

  pX[hðüÍ·é@ïÍêxµ©È¢ÌÅÓµÄ¾³¢DpX[h
  Ìñd`FbNðµ½¯êÎCÈºÌR}hðg¢Üµå¤:

       losetup -d /dev/loop0

  ±ÌR}hÍ loop foCXðANeBuÅÈ¢óÔÉµÜ·DÉà¤ê
  x losetup ðÀsµCÈºÌæ¤ÉµÄpX[hðmFµÜ·D

       losetup -e serpent /dev/loop0 /etc/cryptfile

  16.
     ext2 t@CVXeðÈºÌæ¤ÉµÄì¬µÜ·:

       mkfs -t ext2 /dev/loop0

  17.
     ±±ÅCÃ»µ½t@CVXeðÈºÌR}hÅ}EgµÜ·:

       mount -t ext2 /dev/loop0 /mnt/crypt

  18.
     t@CVXeÌgpðI¹µ½çCÈºÌR}hÅt@CVXe
     ðA}EgµÄÛìµÜ·:

       umount /dev/loop0
       losetup -d /dev/loop0

  4.  Ú×Èè

  J[lÖÌpb`Ä:

  pb`ðÄÄC`2.2.x' [X©çAbvO[hµÜ·D `2.2.x' ü
  ¯É[X³êÄ¢é»ê¼êÌpb`ÍoOC³Å·DV@\ÍJÅJ
  [lÅ é `2.3.x' ÉÇÁ³êÜ·Dpb`ðÄÄCXg[·éÉ
  ÍC»ÝÌo[WæèVµ¢pb`t@CðSÄüèµCÈºÌR}
  hðÀsµÜ·:

       cd /usr/src
       gzip -cd patchXX.gz | patch -p0

  »ÝÌ\[Xc[æèo[WÔªå«¢àÌðSÄCXX ÉÄÍß
  Ä¢«Ü·D±êÍÔÉs¢Ü·D

  J[l\[XÌftHgÌfBNgÍ `/usr/src/linux' Å·D\[
  XªÊÌêÉCXg[³êÄ¢éêÍC`/usr/src/linux' ©çV
  {bNNð£é±Æð¨©ßµÜ·D

  `util-linux' pbP[WÌRpCÌ½ßÉ `MCONFIG' ðÒWµÜ·:

  ÈºÉ¦·ÌÍCMÒª `util-linux' pbP[WÌRpCÉgÁ½
  `MCONFIG' t@CÅ·D±êÍMÒÌÝè(RedHat 5.2 ð éöxx[XÉ
  µÄ¢Ü·) É©ÈèÁ»µÄ¢éÌÅÓµÄ¾³¢DmÀÉçé×«_
  ÍC`login', `getty', `passwd' Æ¢Á½dvÈVXet@Cðã«
  µÈ¢±ÆÅ·DÆè ¦¸CdvÈsðÈºÉ¦µÜ·:

       ______________________________________________________________________
       CPU=$(shell uname -m | sed s/I.86/intel/)

       LOCALEDIR=/usr/share/locale

       HAVE_PAM=no

       HAVE_SHADOW=yes

       HAVE_PASSWD=yes

       REQUIRE_PASSWORD=yes

       ONLY_LISTED_SHELLS=yes

       HAVE_SYSVINIT=yes

       HAVE_SYSVINIT_UTILS=yes

       HAVE_GETTY=yes

       USE_TTY_GROUP=yes

       HAVE_RESET=yes

       HAVE_SLN=yes

       CC=gcc
       ______________________________________________________________________

  ¨©ß:

  8 ÂÌ[vobNfoCX(`dev/loop0' ©ç `/dev/loop7' ÜÅ)ÌÇêð
  gÁÄàæ¢±ÆÉÓµÄ¾³¢DÜ½C}Eg|CgÍÚ§½È¢
  fBNgÉµÜµå¤DMÒÍCz[fBNgÈºÉp[~bV
   700 ÌfBNgðìé±Æð¨©ßµÜ·D¯¶±Æªf[^ðüê
  ét@CÉà¾¦Ü·DMÒÍ `/etc' tH_àÉ `sysfile' â
  `config.data' Æ¢Á½t@C¼Åu¢Ä¢Ü·D±êÍÊC©¦³êÜ
  ·D

  MÒÍC1 R}hÅt@CVXeÌ}EgÆA}Egðs¤½ß
  ÌCÆÄàÈPÈ Perl XNvgð«Üµ½DÈºÌàeÌt@Cðì
  èC±êðÀsÂ\Éµ(chmod u+x)CpXªÊÁ½êÉu¢Ä¾³¢D

       ______________________________________________________________________
       #!/usr/bin/perl -w
       #
       #minimal utility to setup loopback encryption filesystem
       #Copyright 1999 by Ryan T. Rhea
       `losetup -e serpent /dev/loop0 /etc/cryptfile`;
       `mount /mnt/crypt`;
       ______________________________________________________________________

  ãLÌXNvgð `loop' Æ¼t¯Ü·D±êðg¤ÆCR}hê
  Â(`loop')ÆpX[hüÍÅ}Egðs¦Ü·D

       ______________________________________________________________________
       #!/usr/bin/perl -w
       #
       #minimal utility to deactivate loopback encryption filesystem
       #Copyright 1999 by Ryan T. Rhea
       `umount /mount/crypt`;
       `losetup -d /dev/loop0`;
       ______________________________________________________________________

  2 ÂÚÌXNvgð `unloop' Æ¼t¯Ü·D`unloop' ðÀs·éÆC·
  ®Ét@CVXeðñANeBuÉÅ«Ü·D

  5.  ú{êóÉÂ¢Ä

  ú{êóÍ Linux Japanese FAQ Project ªs¢Üµ½B|óÉÖ·é²Ó©
  Í JF vWFNg <JF@linux.or.jp> ¶ÉAµÄ¾³¢B

  üùððÈºÉ¦µÜ·B

     v1.0j, 27 November 1999
        |ó: ¡´PÃ <fujiwara@linux.or.jp>

        Z³:

        o  é³½ <takavoid@palette.plala.or.jp>

        o  ìY <nakano@apm.seikei.ac.jp>

        o  äLõ <takei@cc.kochi-u.ac.jp>

     v1.1j, 29 November 1999
        |ó: ¡´PÃ <fujiwara@linux.or.jp>