bareos: master a8d82700

Diff Back to Repository
Author Committer Branch Timestamp Parent
mvwieringen mvwieringen master 2015-09-01 22:44 master aa18ca20 Pending
Changeset Secure erase of files.

Some customers need for compliance reasons the ability that we use a
secure method for erasing files. This patch adds such ability by
allowing an external program to be invoked to perform the secure erase.

Strict industry standards and government regulations are in place that
force organizations to mitigate the risk of unauthorized exposure of
confidential corporate and government data. Regulations in the United
States include HIPAA (Health Insurance Portability and Accountability
Act); FACTA (The Fair and Accurate Credit Transactions Act of 2003);
GLB (Gramm-Leach Bliley); Sarbanes-Oxley Act (SOx); and Payment Card
Industry Data Security Standards (PCI DSS) and the Data Protection Act
in the United Kingdom. Failure to comply can result in fines and damage
to company reputation, as well as civil and criminal liability.

Data erasure may not work completely on flash based media, such as Solid
State Drives and USB Flash Drives, as these devices can store remnant
data which is inaccessible to the erasure technique, and data can be
retrieved from the individual flash memory chips inside the device.
Data erasure through overwriting only works on hard drives that are
functioning and writing to all sectors. Bad sectors cannot usually be
overwritten, but may contain recoverable information. Bad sectors,
however, may be invisible to the host system and thus to the erasing
software. Disk encryption before use prevents this problem.
Software-driven data erasure could also be compromised by malicious
code.
mod - src/dird/dird.c Diff File
mod - src/dird/dird_conf.c Diff File
mod - src/dird/dird_conf.h Diff File
mod - src/dird/msgchan.c Diff File
mod - src/dird/ndmp_dma.c Diff File
mod - src/dird/restore.c Diff File
mod - src/dird/ua_status.c Diff File
mod - src/dird/verify.c Diff File
mod - src/filed/accurate_lmdb.c Diff File
mod - src/filed/dir_cmd.c Diff File
mod - src/filed/filed.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/filed/status.c Diff File
mod - src/findlib/create_file.c Diff File
mod - src/lib/bpipe.c Diff File
mod - src/lib/bsys.c Diff File
mod - src/lib/crypto_cache.c Diff File
mod - src/lib/protos.h Diff File
mod - src/lib/signal.c Diff File
mod - src/stored/backends/unix_file_device.c Diff File
mod - src/stored/dir_cmd.c Diff File
mod - src/stored/job.c Diff File
mod - src/stored/spool.c Diff File
mod - src/stored/status.c Diff File
mod - src/stored/stored.c Diff File
mod - src/stored/stored_conf.c Diff File
mod - src/stored/stored_conf.h Diff File
mod - src/win32/stored/backends/win32_file_device.c Diff File