Hot answers tagged ecryptfs
5
Full disclosure: I am one of the authors and the current maintainer of the eCryptfs userspace utilities.
Great question!
Linux has a maximum filename length of 255 characters for most filesystems (including EXT4), and a maximum path of 4096 characters.
eCryptfs is a layered filesystem. It stacks on top of another filesystem such as EXT4, which is ...
5
As of ecryptfs-utils version 96, ecryptfs-find is the best way to go from an encrypted path to a non-encrypted path. It meets the needs of most users that need to map between filenames, but there are some things to note about the tool:
It doesn't decrypt filenames. It maps the filenames based on the inode number corresponding to a file.
You must have a ...
4
As for the tutorial, search engines seem to work, e.g. this one on howtoforge.com seems to give reasonable hints.
Generally you might want to reconsider what exactly you are trying to achieve in the end. While eCryptfs will (to some degree) guarantee confidentiality you should be aware of several things:
to hide the contents of home directory from other ...
3
Ecryptfs stores each encrypted file in one file (the lower file, in ecryptfs terminology). The directory structure of the lower files mirrors that of the payload files, although the file names are encrypted. The metadata (modification times, in particular) of the lower files also reveals that of the payload files. The size of the lower file is slightly ...
3
This thread is very interesting because I was wondering the exact same thing. I can live with having to rename 20 files out of 50 000 if the filenames need to be 140 characters or less, but 45 or less isn't feasible (in my situation) because it would require me to rename too many files.
I asked the exact same question directly to Synology (even pointing ...
3
This is a bug but it isn't related to the one that Aaron linked to. I'm unable to reproduce it at the moment, so can you please file a new bug here: https://bugs.launchpad.net/ecryptfs/+filebug
You can copy and paste from the description above, but I also need to know more about the Linux distribution and kernel version that you're using. Thanks!
3
In the ssh_config file, you can can change the location of where it looks for your private key. You could probably do something like make a new folder at /etc/ssh/keys/ and put your id_rsa private key file in there and then change the IdentityFile option in ssh_config to look in the new location. In doing so you'll want to take certain measures to secure ...
3
If your home directory is encrypted, the ssh daemon can't get in it to check if your private key matches your public one. Your .ssh folder is encrypted after all.
A workaround for this might be to have your .ssh folder with your authorized_keys in plaintext in your unencrypted home directory.
But if your encryption techinque uses your password as a key to ...
2
Yes, this is definitely doable!
You'll just want to run rsync from a remote machine.
To back up my encrypted data, I use an hourly cronjob, like this:
00 * * * * rsync -aP username@remotehost:/home/.ecryptfs/username /path/to/local/backup
Note that this directory, /home/.ecryptfs/username, has two subdirectories:
/home/.ecryptfs/username/.ecryptfs
...
2
It is absolutely essential that you record your randomly generated mount passphrase, without which it's impossible to recover your data. I can't stress that more strongly :-)
You should write this down, or print it out and store it somewhere safe.
Alternatively, you might consider using the zEscrow service from Gazzang. In Ubuntu (or Mint) 12.04 or ...
1
It's probably a bug / by-design defect in ecryptfs. See this launchpad bug report.
In a nutshell, ecryptfs simply doesn't write the file to disk immediately. My guess this is because of the encryption overhead (the filesystem probably encrypts the data in a background thread and writes it only after that has completed).
The bug is from 2009 and the ...
1
You could create an encrypted partition on the RAID, and give each user a directory there (just like /home/user with respect to user/group ownership), and symlink the offending directories in there. I don't know offhand if such a setup will work with all users of those directories, or if there is a way to make the user's Downloads just really be at ...
1
The encrypted home utilities don't support the ability to enable encrypted filenames after you've set up your encrypted home directory. But, I looked at the ecryptfs-migrate-home script and believe that it should be enabling filename encryption by default.
Let's verify that filename encryption is enabled. Do you have two lines in your key signature file?
$ ...
1
First of all, it's extremely doubtful that you'll see a noticeable performance improvement using xattrs for eCryptfs metadata.
As for specifying particular mount options, you can sort of do this using the "ALIAS" feature, which I've documented in the mount.ecryptfs_private manpage. Here, you can add some fstab-style mount options, which can work for other ...
1
Like people said in the comments, if you don't recall your old password or ecryptfs passphrase, there's nothing which can be done. So I made a "dictionary attack", helped by the fact that I remembered a fair big part of the old password, and could log in again and update the ecryptfs password so that it uses the new one.
The moral of the story: the password ...
1
In ecryptfs-utils 96-1 the file pam_ecryptfs.so is installed in /lib/security (click) which was changed in ecryptfs-utils 96-2 to /usr/lib/security (click). You might just need to update your system.
Only top voted, non community-wiki answers of a minimum length are eligible
