| View previous topic :: View next topic |
| Author |
Message |
friction
Tux's lil' helper
Joined: 16 Sep 2002
Posts: 109
|
 Posted: Fri Aug 20, 2004 9:00 am Post subject: Where is the Security Association Database (SAD) stored? |
 |
|
The Security Association Database (SAD) and the Security Policy Database (SPD) are "in the kernel", according to every single link in Google.
But at SOME point it's stored in a file on the file system, but WHERE?
Why don't they keep it all in a text file? One of the real beauties of linux is that it's so easy to troubleshoot at a low level, because ultimately - if you really need to - you can boot off another hard drive and edit the files manually. You can't do that with Windows and it's monolithic Jet databases, which makes it a real pain - don't tell me Linux is heading down that path too! |
|
| Back to top |
|
 |
lblblb
Tux's lil' helper
Joined: 19 Jun 2003
Posts: 75
|
| Posted: Fri Aug 20, 2004 11:50 pm Post subject: Re: Where is the Security Association Database (SAD) stored? |
|
|
| friction wrote: | | ...You can't do that with Windows and it's monolithic Jet databases, which makes it a real pain - don't tell me Linux is heading down that path too! |
What, you don't like the "one fubar'd (binary) file = one fubar'd system" model?, and "registry dust" cleaners, and such?
Sorry no useful info here -- just had to chime in with my $0.02. That design decision for microsoft is part of what gives i.t. geeks like me job security. |
|
| Back to top |
|
|
Genone
Retired Dev
Joined: 14 Mar 2003
Posts: 9625
Location: beyond the rim
|
| Posted: Sat Aug 21, 2004 12:44 am Post subject: Re: Where is the Security Association Database (SAD) stored? |
|
|
| friction wrote: | | But at SOME point it's stored in a file on the file system, but WHERE? |
You're sure on that? I don't know much about IPSEC but as far as I understand it from a little reading on Google the SAD/SPD is an internal kernel table that is edited with the setkey command. |
|
| Back to top |
|
|
friction
Tux's lil' helper
Joined: 16 Sep 2002
Posts: 109
|
| Posted: Sat Aug 21, 2004 4:35 am Post subject: Re: Where is the Security Association Database (SAD) stored? |
|
|
| Genone wrote: | | You're sure on that? I don't know much about IPSEC but as far as I understand it from a little reading on Google the SAD/SPD is an internal kernel table that is edited with the setkey command. |
Well, unless it's reset every time you reboot - I guess I just assumed things set with setkey were persistent across reboots, and I'm not at my Gentoo box to try it.
If it's not, does Gentoo give you a nice way of storing persistent settings, ala the iptables init script? |
|
| Back to top |
|
|
|
Kernel & Hardware
