Re: DOD wipe of disks in a virtual environment.

Rob,

I have never used the NWS commands to create or manage virtual disk drives.
You have an advantage over me in that. Let me assume for the moment that
all objects under NWS (virtual disk drives) can be referenced and removed
via stream file API's. Let me also assume that one could use the stream
file APIs to fill up virtual disk drives.

My understanding of the DOD requirement is that removal of file references
is deemed inadequate. But filling up the space previously occupied by files
- that is filling the space with nonsense data would meet the requirement.

Couldn't one do that via stream file APIs?



On Fri, Aug 28, 2015 at 5:32 AM, <rob@xxxxxxxxx> wrote:

Nathan,

Try this
CRTNWSSTG NWSSTG(DELETEME) NWSSIZE(2) FORMAT(*OPEN)
CRTNWSD NWSD(DELETEME) RSRCNAME(*AUTO) TYPE(*GUEST *OPSYS) ONLINE(*NO)
PARTITION(DELETEME)
VRYCFG CFGOBJ(DELETEME) CFGTYPE(*NWS) STATUS(*ON)
WRKNWSSTG

Now, show me how you're going to do the following on that disk
<snip>
From what I gather, you use a utility which purges all files, then writes
perhaps many more files to fill up "every sector". Repeat the process 3
times, then do a final purge.
</snip>


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Nathan Andelin <nandelin@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 08/27/2015 06:10 PM
Subject: Re: DOD wipe of disks in a virtual environment.
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



A number of references suggest that the DOD spec for data erasure "DoD
5220.22-M" was never intended to be a general standard; that more recent
DOD publications point to NIST Special Publication 800-88:

http://bit.ly/1KaXQHJ

The premise is that simply removing all file references (DLTLIB, DEL,
etc.)
is inadequate. The DOD called for filling the "disk" with 1's and 0's,
which would probably not be the current terminology.

From what I gather, you use a utility which purges all files, then writes
perhaps many more files to fill up "every sector". Repeat the process 3
times, then do a final purge.





On Thu, Aug 27, 2015 at 3:03 PM, Jerry Adams <midrange@xxxxxxxx> wrote:

Larry,

You cannot prove that something is impossible. Only that it's possible.
Just because you can't prove the latter does not resolve to the former.
Unless it's Thursday. Oh @#$% it is!

Jerry C. Adams
A society unaware of its history is like a person suffering from

amnesia.

It simply cannot function efficiently. -Norman Davies
IBM i Programmer/Analyst
--
NMM&D
615-832-2730

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
DrFranken
Sent: Thursday, August 27, 2015 1:49 PM
To: Midrange Systems Technical Discussion
Subject: Re: DOD wipe of disks in a virtual environment.

'zactly. It doesn't matter that it would be impossible to get the data
back
without a fabnabulously large amount of work and at an extreme cost. If

you

can't prove it's impossible, it's possible.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 8/27/2015 2:44 PM, rob@xxxxxxxxx wrote:

Darryl,

John Lennon once said "Perception is 99% of reality". Arguing whether
or not SLS scrambles the data around enough after deleting the network
storage space is effective enough, or even better, will get no where
with someone who wants to be able to tell his auditors that "yes, the
data wipe met DoD specifications".


Rob Berendt

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.