Is it possible that my Linux partition creates files in another partition with me not noticing it?

If yes, how to prevent it?

Background: Manjaro partition encrypted, bootloader on Manjaro, swap unit masked. The aim is to keep safe data encrypted in Linux and prevent any leak. As far as I know the only weak link in the chain is a evil maid attack.

  • A partition doesn't create files. A process does... And how do you prevent the evil maid from suspending your protection? – xenoid Nov 27 '19 at 12:50
  • @xenoid with partition I meant anything that conceptually is contained in the partition, like processes that happen while I'm in the partition's system. I'm supposed to avoid the evil maid ensuring that the only bootloader I'm writing a password into is the original one. – user383874 Nov 27 '19 at 13:56
  • How do you ensure that you are booting on an unmodified kernel (UEFI?). How do you prevent the EM to connect a network (USB or Ethernet) on a running machine? – xenoid Nov 27 '19 at 17:37

Your Linux installation can only create files on partitions that are mounted.

So unless you mount unencrypted partitions into your system (or remote NFS-shares etc...), no, it won't create files "outside".

Be aware: Windows-partitions on your device can be mounted with a single mouse-click, depending on your exact setup.

  • At this point I can just be careful about possible programs that mount partitions or things in my current installation... – user383874 Nov 27 '19 at 13:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy