[SOLVED] Partition Proxy: System Wide File Read/Write Redirection

steampunk · 01-24-2012, 03:37 AM

I need to alter all data that any process tries to write to a specific partition. I also need to alter all data in a file that any process reads from said partition before it gets to the requesting process.

Is there a way to apply this based upon just one user account?

Is there a way to apply it system wide?

Is this possible through simple piping or other command line utilities?

unSpawn · 01-24-2012, 11:03 AM

Quote:

Originally Posted by steampunk

I need to alter all data that any process tries to write to a specific partition. I also need to alter all data in a file that any process reads from said partition before it gets to the requesting process.

Interesting. What would be even more interesting would be to know what the exact problem is you are trying to solve. Examples? The more details the better. What application this is about? Are you trying to modify data in flight?

Quote:

Originally Posted by steampunk

Is this possible through simple piping or other command line utilities?

Probably not. I doubt a ready-made solution exists, the first thing I'd try is look for something based on FUSE in http://sourceforge.net/apps/mediawik...le=FileSystems (say fsfipi?) and modify that.

steampunk · 01-24-2012, 11:14 AM

Quote:

Originally Posted by unSpawn

Interesting. What would be even more interesting would be to know what the exact problem is you are trying to solve. Examples? The more details the better. What application this is about? Are you trying to modify data in flight?

Probably not. I doubt a ready-made solution exists, the first thing I'd try is look for something based on FUSE in http://sourceforge.net/apps/mediawik...le=FileSystems (say fsfipi?) and modify that.

To put in a nutshell, I'm remastering a custom live distro with software for a security environment. The software is to run in ram, but when documents are saved, they must be piped to a AES encryption script, then written to disk. When reads occur, the reverse is done. I'd like the filesystem writes and reads to be interrupted at a low level so the programs don't need to be be concerned that this script even exists.

unSpawn · 01-24-2012, 12:11 PM

Quote:

Originally Posted by steampunk

when documents are saved, they must be piped to a AES encryption script, then written to disk. When reads occur, the reverse is done.

Thanks for clarifying. So how do you envision encryption works? I mean if you allow the user to set the encryption key you could use PAM, FUSE, EncFS, pam_encfs and be done with it using OTS components?

steampunk · 01-24-2012, 04:29 PM

Looks like encfs is a good way to go. It has a couple of graphical front ends, CyrptKeeper and TrueCrypt. I think I like TrueCrypt better because you can use a whole bunch of keys and I think you add salt by moving the mouse, whereas cryptKeeper is just a password.

They aren't too user friendly, but they'll work. I was hoping for something that less geeky types could use without too much puzzling through the interface and wizard.

unSpawn · 01-24-2012, 05:19 PM

Quote:

Originally Posted by steampunk

Looks like encfs is a good way to go.

Then please mark this thread solved.

Quote:

Originally Posted by steampunk

It has a couple of graphical front ends, CyrptKeeper and TrueCrypt.

No. CryptKeeper is a GNOME GUI for EncFS. TrueCrypt is a different product altogether.