On Fri, 04 Jul 2008 09:03:49 +0100, Invisible wrote:

> Er... like, WTF?

Well, it's not that difficult to understand - this is what happens when 
technically incompetent people decide how to implement policy.

From what you've seen, you've witnessed some of this behaviour firsthand.

That said, there are ways, for example, to prevent a sysadmin from seeing 
files in a filesystem.  File-level encryption, for example - or directory-
level.  With Linux, this is almost so simple as to be trivial using encfs 
(of course with requisite Linux-foo skills).

But ultimately, yes, you're right - a sysadmin needs to be worthy of the 
trust placed in them.  That's rule #1.  They may not be able to get at 
the encrypted files, but the sure could still nuke them.

Jim

Post a reply to this message