I'd like to address following scenario:
- Company keeps documents in-house and not in Cloud
- Documents are stored on Samba Share
- Sysadmins have access to the storage so they can dump it
- The point is to reduce the Evil Sysadmin Threat
I am considering following solution. Use the Samba Proxy which performs encryption in similar fashion as Disk Encryption is done today (just on the file level, which is reading, writing, seeking, overwriting from offset etc).
My question is, if there is a real software which can perform this task (not the imaginary one), and if not, is it worth implementing it or is there alternative in form of some sort of private cloud where it can be solved?
The private cloud would work with MS Office the way that the documents are stored there just like in Office Cloud and there's already security built-in, which means, it's encrypted per user and there's dedicated key server to which sysadmins do not have access.