RE: [suse-security] Encrypted Filesystem
The company I work for requires this. I have a dual boot Dell notebook - WinXP (which I virtually never use but the company requires to be on the system) and SUSE 9.2. My /home partition is an encrypted reiserfs partion - approx. 25GB. It asks me for the password/passphrase at bootup/mount. I've used this same notebook with and without the encrypted partition - I'd have to say any performance degredation is not terribly noticable. The only downside - I'd like to upgrade to SUSE 9.3 - but I'm not exactly sure how that is going to work. Eric -----Original Message----- From: Ciro Iriarte [mailto:cyruspy@gmail.com] Sent: Saturday, June 04, 2005 3:27 AM To: suse-security@suse.com Subject: [suse-security] Encrypted Filesystem Hi: I'll probably get a Latitude D610, and because i'll work with sensible information and because of that i was considering the encrypted filesystem option on SuSE 9.2 in case the laptop is stolen or something like that, but i'm not sure about how it works, maybe it's not practical to encrypt +/- 20GB of data and pretend to work normally with that every day, any hints? Thanks in advanced CI.- -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
Hello, Am Montag, 6. Juni 2005 16:48 schrieb Baenen Eric P Contr AFRL/HEC:
My /home partition is an encrypted reiserfs partion - approx. 25GB. [...] The only downside - I'd like to upgrade to SUSE 9.3 - but I'm not exactly sure how that is going to work.
If you do an upgrade installation - no problem. If you do a _fresh_ installation and want to use the "old" crypto partition: Do _not_ mount it while installation (and don't do a fsck!). Get the latest YOU updates first and then mount it. Otherwise, the partition will be mounted using the wrong crypto module which will cause data loss. (There's a flyer in the box and a SDB article about this problem.) /etc/cryptotab should contain the following encryption modules: - twofish for partitions created with SuSE 9.0 (or older) - 160 bit only - twofishSL92 for partitions created with SuSE 9.1 or 9.2 - twofish256 for partitions created with SuSE 9.3 [Fullquote moved to /dev/null] Regards, Christian Boltz --
mein Internet geht nicht. Hm, Du hast ein eigenes? [> Waschbaer.linux(at)gmx.net und Manfred Tremmel in suse-linux]
participants (2)
-
Baenen Eric P Contr AFRL/HEC
-
Christian Boltz