[NTLUG:Discuss] my bad - my real subject is security in tar or gzip or something like that

[Fred James]

Yes, I understood that it could probably be ported to any *NIX, and that 
is cool.  But I still may be asking too much.  Is it safe to think about 
encrypting/decrypting a binary data file such as from Oracle?  Oracle 
support starts getting wiggly and worrying about possible corruption 
whenever you zip their files, though I have never experienced, or heard 
of, such a problem.

We are looking at a shared archive space solution.  Problem?  I deal 
with business data, and the archive space would store all kinds of data, 
and have "too many" users (i.e., too many people would have root access 
to the box).  In other words, unless there is some kind of "security" we 
can apply to the file itself, storing the files there would never pass 
an audit.  For instance: could we prevent the deletion of the files?

I personally don't believe there is away to "bless" this idea, but I 
don't know everything, so I am asking.


Jim Williams wrote:

> Not Linux specific but specific to the GNU version of zip maybe. That 
> version of zip can then be compiled on any UNIX or even Windoze to 
> access the file. Another option would be to encrypt the file with GPG 
> after zipping it but you'd just end up doubling the work to zip and unzip.
> 
> Fred James wrote:
> 
>> ...couple of problems:
>> (1) this seems to be Linux specific, not UNIX in general, though I 
>> might be able to get around that.
>> (2) I would be applying this to binary data files (Oracle to be 
>> specific), and that sounds a little scary - any experience along those 
>> lines?
>>
>>
>> George Lass wrote:
>>
>>> man zip.....
>>>
>>>        -e     Encrypt the contents of the  zip  archive  using  a
>>>               password  which  is  entered  on  the  terminal  in
>>>               response to a prompt (this will not be  echoed;  if
>>>               standard  error is not a tty, zip will exit with an
>>>               error).  The password prompt is  repeated  to  save
>>>               the user from typing errors.
>>>
>>>
>>>
>>> Fred James wrote:
>>>
>>>> (I FUBAR'd on my first attempt to send this to the list - my subject
>>>> line was "password" - I apologize to anyone I have inconvenienced.)
>>>>
>>>> Anybody know anything about a password protected tar or gzip or
>>>> something like that?
>>>>
>>>> -- 
>>>> "Wisdom begins in wonder." - Socrates
>>>>
>>>> _______________________________________________
>>>> http://www.ntlug.org/mailman/listinfo/discuss
>>>>
>>>
>>> _______________________________________________
>>> http://www.ntlug.org/mailman/listinfo/discuss
>>>
>>>
>>>
>>
>>
> 
> 


-- 
"Wisdom begins in wonder." - Socrates