Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


File shredding tool for Linux?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

File shredding tool for Linux?

bigcatbigcat Member

Good day!

I've been tasked to find commercial file shredding tool for Linux(Ubuntu specifically) server that support DoD 5220.22-M method.

I'm having a hard time finding such tool. I know there's couple of good free tools such as shred, wipe and scrub. But my organization insist on commercial tool backed with support. I blamed my compliance team.

Requirement

  • Support DoD 5220.22-M method

  • Not free. Commercially-backed by a company

  • Doesn't matter CLI-only or with GUI

Do you know any?

Comments

  • Do the servers use conventional HDDs? If they don't, good luck.

    Thanked by 1eol
  • Shot2Shot2 Member

    Google : "secure delete file dod buy license"

    • WhiteCanyon WipeDrive
    • Bitraser
    • etc.

    But I'd rather resign from such a moronic organization

    Thanked by 2Falzo AlwaysSkint
  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    shred is good enough?

  • @poisson said:
    Do the servers use conventional HDDs? If they don't, good luck.

    Its a mix of HDD + SSD.

    I know the limitation of it and journal filesystem.

    @Falzo said:
    https://www.blancco.com/about-us/supported-standards/
    @Shot2 said:
    Google : "secure delete file dod buy license"

    • WhiteCanyon WipeDrive
    • Bitraser
    • etc.

    All 3 mentioned Windows-only. Unless I miss anything?

    @FAT32 said:
    shred is good enough?

    Please re-read the requirement.

  • Shot2Shot2 Member

    I think some of them run under Unix (or are actually a bootable disk running some Unix).

    Or just tell Moronic Organization Inc. that the software runs under Wine running under Ubuntu, they'll be happy, problem solved.

    Another choice : BCWipe by Jetico.

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    @bigcat said:
    Please re-read the requirement.

    Sorry I need some coffees.

  • sdashsdash Member
    edited March 2019

    @bigcat
    a) Paragon Disk Wiper Business
    b) Active @ KillDisk Industrial (http://www.killdisk.com/killdisk-industrial.htm)
    The KillDisk link specifically mentions the U.S. DoD 5220-22M erasure procedure.

    Thanked by 1Aluminat
  • eoleol Member

    @poisson said:
    Do the servers use conventional HDDs? If they don't, good luck.

    Even then the drives won't forget easily.
    Degaussing is the only real option.

  • FalzoFalzo Member

    @bigcat I think if you want to do it properly, you would remove the disk from whatever computer it is in and attach it externally to the one running the wiping program.

    if it is in a server right now so you can't pull it. you probably want to have an iso that you can (virtually) mount and boot from (like @Shot2 already mentioned) so you can do it via ipmi?

    I think you should get in contact with the companies mentioned to clarify on your specific use case - and maybe get a quote already to tell your company about the costs. maybe then suddenly the requirements are changing. ;-)

  • angstromangstrom Moderator
    edited March 2019

    This (non-free) icon is said to work.

    Edit: Sorry, it's been a long day! But I know that file-shredding is a serious matter.

  • eoleol Member

    @angstrom said:
    This (non-free) icon is said to work.

    Edit: Sorry, it's been a long day! But I know that file-shredding is a serious matter.

    No reason to be sorry.
    You done well.
    Thanks.

    Thanked by 1angstrom
  • angstromangstrom Moderator

    @eol said:

    @angstrom said:
    This (non-free) icon is said to work.

    Edit: Sorry, it's been a long day! But I know that file-shredding is a serious matter.

    No reason to be sorry.
    You done well.
    Thanks.

    I tried. :smile:

    I'm not as quick at images/memes as you guys. :smile:

    Thanked by 1eol
  • YuraYura Member

    pinging @HillaryClinton

    Thanked by 2eol Chuck
  • (from another thread ... not sure if this runs linux though ...)

    @eol said:

    @uptime said:
    Not sure what to do about ssd disks though.

    Thanked by 1eol
  • JanevskiJanevski Member
    edited March 2019

    @bigcat Just take their drive and tell them you've pulverized it out of existence from their realm and now, it's in a better place. (And look gazingly towards the sky.)

    Thanked by 1eol
  • ChuckChuck Member

    @Yura said:
    pinging @HillaryClinton

    look like @HillaryClinton shredded her User Profile.

    "The user you were looking for could not be found."

  • If the value of the data is really that high, just use a hammer because there is no real savings using other options where there's always the possibility of recovery. AFAIK there is no backdoor for smashed memory chips or magnetic plates.

    Thanked by 1eol
  • @poisson said:
    If the value of the data is really that high, just use a hammer because there is no real savings using other options where there's always the possibility of recovery. AFAIK there is no backdoor for smashed memory chips or magnetic plates.

    But what if that's what they want you to believe!!?

  • emreemre Member, LIR

  • @FAT32 said:

    @bigcat said:
    Please re-read the requirement.

    Sorry I need some coffees.

    You should ban yourself for not reading the requirements.

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    @yokowasis said:
    You should ban yourself for not reading the requirements.

    I am afraid Vanilla will break, just assume I was banned for 1 minute.

  • t0mt0m Member

    @bigcat said:
    But my organization insist on commercial tool backed with support. I blamed my compliance team.

    • Not free. Commercially-backed by a company

    Or find a company who will give you support with a free tool, if necessary. Make a Service Level Agreement with them and pay them an x ammount per month?

  • OflameoOflameo Member
    edited March 2019

    Buy a RHEL license and then use its shred, wipe, and scrub.

    EDIT:

    Wait, you are using Ubuntu already.

    Buy a Ubuntu Advantage license and then use its shred, wipe, and scrub. You can get the FIPS-certified cryptographic modules. Compliance will think that is secure.

  • I'd want to clean boot the PC from a bootable ISO / rescue system to do the exercise and not boot off the hard drive I'm wiping.

    Once the data is overwritten... there isn't really a reliable way to resurrect it all in one piece... so just don't be too paranoid on this.

    Thanked by 1angstrom
Sign In or Register to comment.