Hello, Am Sonntag, 8. März 2020, 17:19:19 CET schrieb Axel Braun:
Hm, guided setup encrypts root partition AND swap. Not sure if this is a good idea....
It is. If you are paranoid enough to encrypt your root partition (you should!), then you don't want to have parts of your RAM (like open documents or in worst case your disk encryption key) swapped out to unencrypted swap ;-) This is somewhat similar to the discussion if you really need to encrypt the root partition, or if encrypting /home is good enough. IMHO it isn't, because for example files in /tmp/ can also contain sensitive data which you don't want to have unencrypted. For example, when you click a PDF attached to a mail in KMail, it will get stored in /tmp/ before it gets opened. Sidenote: I have no idea if suspend to disk works with encrypted swap - I don't have any swap to test. Regards, Christian Boltz -- If I had a cent for everytime someone complained about single RPM installation failing with KPackageKit on 11.4, I'd buy Attachmate ;-) [Martin Schlander in opensuse-factory] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org