|
Forensics
Converting an external hard drive enclosure into a write blocker? Nov 14 2007 02:59AM Tom Yarrish (tom yarrish com) (3 replies) RE: Converting an external hard drive enclosure into a write blocker? Nov 19 2007 07:06PM Kian Stipp (kstipp gowhitehat com) (1 replies) Re: Converting an external hard drive enclosure into a write blocker? Nov 20 2007 04:11PM Terry Roebuck (terry roebuck usask ca) (1 replies) Re: Converting an external hard drive enclosure into a write blocker? Nov 25 2007 01:23AM Matthew Pepe (mtpepe mac com) (1 replies) RE: Converting an external hard drive enclosure into a write blocker? Nov 26 2007 09:13PM Robinson, Sonja (Sonja Robinson fticonsulting com) Re: Converting an external hard drive enclosure into a write blocker? Nov 17 2007 07:58AM Pavel Gladyshev (pavel gladyshev info) |
|
|
Privacy Statement |
you can mount the storage as read-only - any unix filesystem will
support read-only mount, and provided your root account isnt
compromised, no one can remount it as write. Root cant write to
read-only mounted filesystems without remount either.
mount -r /dev/da2 /readonly in BSD land..
Id say thats the easiest route without buying specialized hardware.
Sorry if this is something you already tried/thought about..
Tom Yarrish wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hey all,
> I wanted to find out if there was a method to convert an external hard
> drive enclosure into a "cheap" write blocker device? I'm not looking
> for something to use from a forensic standpoint. Basically if I want
> to put a hard drive into an enclosure and pull data/burn data to
> DVD/whatever off of it, but prevent anything from being written to the
> drive, I can do that.
>
> Thanks ahead of time,
> Tom
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (Darwin)
>
> iD8DBQFHOmStZWzkfeDiTw4RAqcdAJ9FZ+QX3tnajnV4yaUPhK/R/xcqogCfV9Br
> h+Fb956D4hQWWJ2roctoIT8=
> =EOp6
> -----END PGP SIGNATURE-----
[ reply ]