Hi, I'm looking for a filesystem that can be encrypted - eg to protect sensitive data on a laptop should such a laptop be stolen. I've been told that CryptoFS does this, but it does not seem as if SuSE9.1 supports this. Is CryptoFS the way to go? Are there RPM's available for this? Thanks Nico
On Fri, 2004-06-25 at 12:47, Nico wrote:
Hi,
I'm looking for a filesystem that can be encrypted - eg to protect sensitive data on a laptop should such a laptop be stolen.
I've been told that CryptoFS does this, but it does not seem as if SuSE9.1 supports this.
SuSE 9.1 does support an encrypted file system, although you'd never know it from reading the manuals. Also, there's more than one way to skin a cat. Have a look at: http://koeln.ccc.de/archiv/drt/crypto/linux-disk.html for some options. By the way, I found the above by entering "linux encrypted file system" into Google's search engine. Remember that Google is our friend. Don Henson
Is CryptoFS the way to go?
Are there RPM's available for this?
Thanks
Nico
SuSE 9.1 does support an encrypted file system, although you'd never know it from reading the manuals. Also, there's more than one way to skin a cat. Have a look at:
Thanks for the link. Quite old, but a starting point. I searched the SuSE website, and could only find reference to encrypted file systems for 7.x and 8.0 How do I get to the standard SuSE stuff for 9.1? Thanks Nico
On Fri, Jun 25, 2004 at 04:30:29PM -0700, Nico wrote:
I searched the SuSE website, and could only find reference to encrypted file systems for 7.x and 8.0
How do I get to the standard SuSE stuff for 9.1?
http://portal.suse.com/sdb/en/2001/06/jsj_crypto_filesystem_mini_howto.html is still valid for 9.1 and usable on 9.1. At least, works fo me. Regards, -Kastus
On Fri, 2004-06-25 at 17:30, Nico wrote:
SuSE 9.1 does support an encrypted file system, although you'd never know it from reading the manuals. Also, there's more than one way to skin a cat. Have a look at:
Thanks for the link. Quite old, but a starting point.
I searched the SuSE website, and could only find reference to encrypted file systems for 7.x and 8.0
How do I get to the standard SuSE stuff for 9.1?
Thanks
Nico
Danged if I know. I tried looking for info when I was installing 9.1 but was unsuccessful. Don Henson
On Friday 25 of June 2004 20:47, Nico wrote:
Hi,
I'm looking for a filesystem that can be encrypted - eg to protect sensitive data on a laptop should such a laptop be stolen.
I've been told that CryptoFS does this, but it does not seem as if SuSE9.1 supports this.
Is CryptoFS the way to go?
Are there RPM's available for this?
just go to yast and then partitioner. there you can choose either to encrypt or not the partition. in suse 9.1 it will ask you for min 20 chars length password. I have used an encrypted partition in laptop for many suse versions. of course you can not encrypt root mounted partition but with /home there are not such limits. -- Marek Chlopek
On Saturday 26 June 2004 01:47, Nico wrote:
Hi,
I'm looking for a filesystem that can be encrypted - eg to protect sensitive data on a laptop should such a laptop be stolen.
I've been told that CryptoFS does this, but it does not seem as if SuSE9.1 supports this.
Is CryptoFS the way to go?
Are there RPM's available for this?
Thanks
Nico
its all there already. When you install SuSE you do sooner or later see the overview of what it wants to install. There is among other choices the partitioning proposed. Here you need to select it, to be able to modify your partitions to create an extra partition which you want to encrypt. At the create partition menu you can choose if you want the partition to be encrypted. Just read the comments (on the left side), select it accordingly, and all will be done automatically for you. Works perfectly for me. Please note that SuSE does not give you a choice of encryption algorithm, it uses per default loop_fish2. This is fine, however if you ever want to install a non-suse kernel, such as the latest generic kernel, or the generic win4lin kernel, then these generic kernels do not have the SuSE loop_fish2 module included. In that case you need to set up your crypto-partition manually. Use AES256 or serpent256, which is possibly slower, but even more secure. To install it manually, see the other answers you got, they give links already. HTH, Matt
participants (5)
-
Donald D Henson
-
Kastus
-
Marek Chlopek
-
Matt T.
-
Nico