Am 01.03.2016 um 13:21 schrieb James Knott:
On 03/01/2016 05:32 AM, Daniel Bauer wrote:
I'd like to have a fully encrypted laptop (all except /boot/ , incl. / and swap) with leap 42.1.
The Installer doesn't let me encrypt / (when clicking "encrypt" a message says it's not possible to encrypt / )
If you encrypted /, how would you reach unencrypted directories under it? Also, if you're really worried about security, you probably want to encrypt swap too. I contains anything that's been saved to memory, including your secret data. Also, is there any point in encrypting /bin etc., that only contains executable data? Generally, all you worry about is /home and swap, as that's where your data will be.
Well, since "ever" I have separate partition /boot and an encrypted partition /. This has never been a problem. As much as I know, if you have an encrypted / partition, a separate /home partition is not encrypted, although logically within the /tree... so, why should there be a problem with /boot? Of course swap will be encrypted, too, as everything (except /boot). I think the various /tmp and /var/tmp-files should also be encrypted. Anyway, it easier to encrypt all but /boot, so I don't have to worry about what is and what is not encrypted. However I just tried with an encrypted LVM and it does not boot (s my other post...) :-( -- Daniel Bauer photographer Basel Barcelona http://www.daniel-bauer.com room in Barcelona: https://www.airbnb.es/rooms/2416137 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org