up vote 2 down vote favorite
1

I have setup an Ubuntu Server for my university project. Aside from full disk encryption I also intend to use Dafturn Ofris (a Linux deepfreeze) to make file recovery difficult or for any forensics carried out.

Is there a way I could change system settings so that whenever any file is deleted shred is used? I am sure the OS often deletes files during its operations (such as temporary files), which along with the software I am running on my server (which shreds files) should hopefully make a complete mess for any adversaries.

http://linux.about.com/library/cmd/blcmdl1_shred.htm

I am sure this will slow down the server, however if I keep the iteration at 1 pass then hopefully the speed difference should not be too noticeable?

Thank you!

share|improve this question
    
Hm I would not know how to do such a thing. But my main question is why you don't trust the encryption. User flamsmark explained in a different post (askubuntu.com/a/58420/414815) that already-deleted files cannot easily be securely overwritten. In other words, you would have to make sure, that every script and program, including the OS, deletes files securely using commands like shred or srm. – Cat May 31 '16 at 14:38
    
potAito I want the normal delete command to be replaced with shred, if that clarifies? I want it to be impossible to do a normal unsecure delete. – k1308517 May 31 '16 at 14:42
1  
What if you replaced /bin/rm with a different program that securely deletes the files? I'm not sure if that would suffice, meaning if there are other ways to delete files which would not be covered. – Cat May 31 '16 at 14:49
    
@potAito So long as it uses shred instead of rm it's something... I need a definite answer though. – k1308517 May 31 '16 at 14:55
    
You would need to do the same process with unlink. A large majority of system files would be written to /tmp, so you could create a ramdisk to handle that. I suppose at some point adding all of those together with encryption, while not giving you an absolute... I don't know how it would be possible to recover. – bc2946088 May 31 '16 at 15:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.