Ext3 users - Apr 2002 - Filesystem security stuff

Dear all,
I am  planning to add some cryptographic properties (file encryption and digital
signature on file I/O) to Linux filesystem. In detail, I want that user can do
file I/O with encrypted files like he used to do with usual file except some
minor changes (e.g. supply key for decrypting file). For digital signature, all
read and write acts on file of any user must be signed and recorded so that
someone else can give concrete evidences that a user did something on files
later on.
At the first glance, I think I should implement new system calls for file I/O
with encrypted files and add sign procedure to current file I/O system calls.
Since I don't know much about kernel programming, VFS, ext2 or ext3
filesystem then I don't know where I should start. Can anybody give me some
hints?
Thanks,
Dang Nguyen Duc

Dang -- I suggest you look at Erez Zadok's stackable fs -- which
includes things like a cryptfs etc. Goto:

http://www.cs.columbia.edu/~ezk/research/software/

		Regards,
		Chris

--------------------------------------------------------------------
Christopher D. Carothers

Assistant Professor
Department of Computer Science         
Rensselaer Polytechnic Institute
110 8th Street
Troy, New York 12180-3590

e-mail: chrisc@cs.rpi.edu
web page: www.cs.rpi.edu/~chrisc
phone: (518) 276-2930
fax: (518) 276-4033
--------------------------------------------------------------------


On Fri, 5 Apr 2002, DANG NGUYEN DUC wrote:
> Dear all,
> I am  planning to add some cryptographic properties (file encryption and
digital signature on file I/O) to Linux filesystem. In detail, I want that user
can do file I/O with encrypted files like he used to do with usual file except
some minor changes (e.g. supply key for decrypting file). For digital signature,
all read and write acts on file of any user must be signed and recorded so that
someone else can give concrete evidences that a user did something on files
later on.
> At the first glance, I think I should implement new system calls for file
I/O with encrypted files and add sign procedure to current file I/O system
calls. Since I don't know much about kernel programming, VFS, ext2 or ext3
filesystem then I don't know where I should start. Can anybody give me some
hints?
> Thanks,
> Dang Nguyen Duc
> 
>