Re: [Hampshire] Securely deleting files

Top Page
Author: Hugo Mills
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] Securely deleting files

Reply to this message
gpg: failed to create temporary file '/var/lib/lurker/.#lk0x5848d100.hantslug.org.uk.5017': Permission denied
gpg: keyblock resource '/var/lib/lurker/pubring.gpg': Permission denied
gpg: Signature made Thu Mar 8 10:39:23 2007 GMT
gpg: using DSA key B2C27BC21C335860
gpg: Can't check signature: No public key
On Wed, Mar 07, 2007 at 09:52:07AM +0000, Roger Munford wrote:
> If I had a file whose contents I wanted to remove completely from the
> disk, would it be enough to open it and use Fwrite() to overwrite each
> character and then delete?


Note that the tools that overwrite the file multiple times aren't
guaranteed to work on journalled filesystems, as fragments of the file
may remain in the journal or on spare blocks. The only way of having
one of those tools function usefully on a journalled filesystem is to
run the tool on the device containing the complete filesystem (which
will, of course, wipe everything on the filesystem).

If the filesystem is on something like LVM, then even that won't
guarantee it if you've moved things around in LVM when that file
existed, and you'd have to wipe all of the PVs of the VG (and any PVs
that were once a part of the VG).

As Mat says, the only truly "safe" way is to nuke it from orbit
(or, more plausibly, use a furnace and an angle-grinder on the
platters).

Hugo.

-- 
=== Hugo Mills: hugo@... carfax.org.uk | darksatanic.net | lug.org.uk ===
  PGP key: 1C335860 from wwwkeys.eu.pgp.net or http://www.carfax.org.uk
  --- You've read the project plan.  Forget that. We're going to Do ---  
                      Stuff and Have Fun doing it.