3 ms·
What problem are you trying to prevent? - A novice user fatfingering `cryptsetup luksRemoveKey`? Sounds extremely unlikely. - A determined user trying to deli
by majewsky 8y ago
What problem are you trying to prevent?
- A novice user fatfingering `cryptsetup luksRemoveKey`? Sounds extremely unlikely.
- A determined user trying to deliberately destroy information? A lot of things are easier, e.g. `dd if=/dev/zero of=/dev/sda` to `shred important_document.pdf`.
The only thing that would protect against most accidental-destruction scenarios is not giving the users root access, and then you don't have to worry about users removing LUKS keys anyway.