I am not available for this
(also not qualified)...
but I would just like to suggest
that no matter how scientifically you
"shred" some data,
when someone enters a command
to delete a certain message,
you might want to also, periodically
(like, maybe daily or weekly)
copy the "mailbox"
(messages that have NOT been
  deleted / shredded)
to a physically different drive,
and then do some kind of very thorough
erasure (like, the low-level formatting
type of thing -- maybe even also use some
strong magnets nearby... etc.)
and over-writing of the data on the old
media.
(or - - -maybe even physically shred the
  metal and disk drive media surfaces)
(if you can afford to buy new ones
  every so often)
Just a suggestion, because it sounds like
it is really important for the "ghost images"
of erstwhile e-mail messages, to never
fall in to the wrong hands.
-- 
Mike Schwartz
Glendale  AZ
schwartz@acm.org
Mike.L.Schwartz@gmail.com

On 10/5/06, George Toft <george@georgetoft.com> wrote:
>
> Anyone up to the task of changing the source?  This is a for-pay
> project, and if you can deliver, I can put it in the proposal.
>
> George Toft, CISSP, MSIS
> 623-203-1760
>
> "That which does not kill us makes us stronger."
>
>
>
> Eric "Shubes" wrote:
> > George Toft wrote:
> >
> >>Requirements:
> >>1. Deleted files (say, qmail messages after pickup) are shredded upon
> >>deletion.  Immediately upon delete.  Since an application is performing
> >>the delete, I must assume "rm" is not being issued, so I can't
> >>substitute "shred" in its place.
> >>
> >>2. Files owned by vpopmail:vchkpw can only be read by said user:group -
> >>this includes root.  We need to lock root (and every other user) out of
> >>the messages.
> >>
> >>3. Encrypted file system to defend against physical theft.
> >>
> >>
> >>#3 is easy.
> >>
> >>#2 sounds like a job for SELinux.  Alternatives are welcome :)
> >>
> >>What about #1?  Any ideas?
> >>
> >
> > Change the source and rebuild? Should be fairly easy with qmail as it's
> > distributed as source. Other applications might not be as easy.
> >
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>