On 03/01/2016 04:21 AM, James Knott wrote:
On 03/01/2016 05:32 AM, Daniel Bauer wrote:
I'd like to have a fully encrypted laptop (all except /boot/ , incl. / and swap) with leap 42.1.
The Installer doesn't let me encrypt / (when clicking "encrypt" a message says it's not possible to encrypt / )
If you encrypted /, how would you reach unencrypted directories under it? Also, if you're really worried about security, you probably want to encrypt swap too. I contains anything that's been saved to memory, including your secret data. Also, is there any point in encrypting /bin etc., that only contains executable data? Generally, all you worry about is /home and swap, as that's where your data will be.
With a typical directory structure. you would only need to encrypt /home /tmp /var and swap. Of course if you had a proprietary data directory outside of the normal directory tree you would encrypt that as well. There is little to be gained by encrypting / or any of the other locations where the system is actually installed, although some might make a case for /etc -- After all is said and done, more is said than done. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org