Security Basics: Re: How to Test HDD Encryption

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2007-11-14 jfvanmeter () comcast net wrote:
> True,  on a correctly acl'ed systems
> I've seen acls on file systems that gave full user access from root
> down, and windows systems that everyone had full rights too. I would
> rather protect my clients NPPI/PII/PCI information with file encrytion.
For some reason you seem to assume that setting up a working file-level
encryption solution would be an easier task than setting up correct
ACLs. This assumption is wrong.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq