[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bacula-devel] Feature request: Add EFS support on Windows


Hello,

Thanks for the Feature request.  I think someone suggested this before, but 
didn't actually submit a Feature request.

I have added your feature request to the projects file, and would like to 
thank you care you took in preparing it, particularly for giving the detail 
you did -- including links to MSDN, and for getting the formatting 
(spacing, ...) correct.  That certainly simplifies my task and facilitates 
getting it into the projects file.

I think this is an important feature, and it merits some priority ...

Best regards,

Kern

On Tuesday 05 August 2008 15:59:51 Alex Ehrlich wrote:
> Item X:   Add EFS support on Windows
>    Origin: Alex Ehrlich (Alex.Ehrlich-at-mail.ee)
>    Date:   05 August 2008
>    Status:
>
>    What:   For each file backed up or restored by FD on Windows, check if
>            the file is encrypted; if so then use OpenEncryptedFileRaw,
>            ReadEncryptedFileRaw, WriteEncryptedFileRaw,
>            CloseEncryptedFileRaw instead of BackupRead and BackupWrite
>            API calls.
>
>    Why:    Many laptop users utilize the EFS functionality today; so do.
>            some non-laptop ones, too.
>            Currently files encrypted by means of EFS cannot be backed up.
>            It means a Windows boutique cannot rely on Bacula as its
>            backup solution, at least when using Windows 2K, XPP,
>            "better" Vista etc on workstations, unless EFS is
>            forbidden by policies.
>            The current situation might result into "false sense of
>            security" among the end-users.
>
>    Notes:  Using xxxEncryptedFileRaw API would allow to backup and
>            restore EFS-encrypted files without decrypting their data.
>            Note that such files cannot be restored "portably" (at least,
>            easily) but they would be restoreable to a different (or
>            reinstalled) Win32 machine; the restore would require setup
>            of a EFS recovery agent in advance, of course, and this shall
>            be clearly reflected in the documentation, but this is the
>            normal Windows SysAdmin's business.
>            When "portable" backup is requested the EFS-encrypted files
>            shall be clearly reported as errors.
>            See MSDN on the "Backup and Restore of Encrypted Files" topic:
>            http://msdn.microsoft.com/en-us/library/aa363783.aspx
>            Maybe the EFS support requires a new flag in the database for
>            each file, too?
>            Unfortunately, the implementation is not as straightforward as
>            1-to-1 replacement of BackupRead with ReadEncryptedFileRaw,
>            requiring some FD code rewrite to work with
>            encrypted-file-related callback functions.
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge Build the coolest Linux based applications with Moblin SDK & win
> great prizes Grand prize is a trip for two to an Open Source event anywhere
> in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Bacula-devel mailing list
> Bacula-devel@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/bacula-devel



-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Bacula-devel mailing list
Bacula-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/bacula-devel


This mailing list archive is a service of Copilotco.