Tag Info

Hot answers tagged

5

Situation: you have an encrypted home directory. Step 1: you log in over SSH. Your encrypted data is not mounted, so what you see is your “real” home directory on the (unencrypted) main filesystem. This home directory doesn't contain much that's directly usable: ~/.ecryptfs/ contains control data for your encrypted data ~/.Private/ contains your encrypted ...


5

Deep down, mounting is performed by root anyway: only root can call the mount system call. Programs such as mount, pmount and fusermount are setuid root and restrict what non-root callers are allowed to mount. If you're mounting a filesystem that doesn't implement file ownership (e.g. FAT), the user calling mount will end up owning the files (unless ...


4

Mounting does not change your current working directory. I guess that the mountpoint is the directory you are in. You either have to do the mount from elsewhere or to get out of that directory: ls -al ecryptfs-mount-private ls -al cd .. cd - ls -al or cd .. ecryptfs-mount-private cd - ls -al All symlinks have lrwxrwxrwx. This doesn't matter as the ...


4

Don't encrypt the whole hard drive (as in /dev/sda, do it per partition (or more precisely per file system - see below). Have separate file systems mounted at homes for the two users. I'm intentionally avoiding writing separate partitions, since while that is the usual way of doing things, it is constraining in some aspects. It might be more convenient to ...


3

Not possible. Someone, or something has to supply the password for decryption. Obviously it can't be on your home directory (as that is encrypted). It should not be on your hard disk at all, as that would be pointless: An attacker could extract it from there. So I don't see a way to make this automated (i.e, not requiring you) while preserving that only ...


2

Solution is to use luks/dm-crypt and then modify /etc/crypttab file to do what I need.


2

I can think of two valuable ways to achieve such a system w/o encrypting you home twice. separate home partition: create a separate partition that gets mounted to /home. Each user then encrypts its home via encfs. separate home partition for each user: every user gets a separate partition for his home which is itself encrypted using dm-crypt. This ...


1

Hidden files are files with a name starting with a period, they are not displayed unless explicitely requested, by using the -a option or specifically mentioning dot in the argument list. eg `ls -la or ls -l .* file aliases are called links, they can be hard or symbolic. you have symbolic links there (the first character of permissions is an l denoting ...


1

Encryption is a red herring here. It only protects against a very small set of threats. The administrator of the cluster can read all your files as soon as you enter the key to decrypt them. Encryption would only protect you against the administrator if you never decrypted the files on the cluster, in which case you could use some offline form of encrypted ...


1

What do I need to backup apart from the obvious data there and my password. I don't know exactly how ecryptfs works, but I'd say that should be it, yes. There is an easy way to find out though: just copy your backup to another computer and try to mount it. If everything works as expected, then you're fine. If you're missing something, you'll notice it ...


1

How can I debug this? Try to strace the command. That should show the syscalls the program is making, which could help you narrow it down.


1

I think the behaviour you see is just because the Vim backup process is slow. On my plain Ext4 system, this problem manifests as a "file is empty" error from the compiler. To check the timings, I used this Bash sequence: strace -tt -o /dev/stdout gvim --nofork main.cxx | grep 'main.cxx\|close' With backups turned on, I see a 200 ms gap between the file ...



Only top voted, non community-wiki answers of a minimum length are eligible