encrypted filesystem done -now what?

randomx · 04-26-2005, 05:08 PM

Hi,

I managed to a get an encrypted filesystem using cryptoAPI on the kernel 2.4.x series. I've been looking around for more info but all I get are just HOWTOs to set it up but not a "HOWTO make use of it" type of document.

steps I followed...everything has been patched, I get no errors, no nothing...so it's all good.

Code:

dd if=/dev/urandom of=testFile bs=1M count=20

Code:

losetup -e idea /dev/loop0 testFile

Code:

mkfs -t ext2 /dev/loop0

#creating mount point dir

Code:

mkdir /home/frodo/ctest

Code:

mount -o loop,encryption=idea testFile /home/frodo/ctest

so now ....my /home/frodo/ctest has a lost+found dir inside and everything...
of course, the test file is still encrypted.

QUESTIONS:

1. Now should I just dump data into the directory created? if not there, where?

2. All data should be encrypted right away? I did a test by creating a clear text file named XFILE on the ctest dir but I still can see it in plain text from a different computer on the network. Did I do anything wrong?

3. or All the data I dump into the ctest directory is in turn dumped into the testFile encrypted file? if so...can I just delete the XFILE clear text file?

thanks,

Randomx

twsnnva · 04-27-2005, 06:13 AM

It should be encrypted. I'm not sure exactly how you set it up but you should be required to supply a password when mounting the filesystem. The reason other systems on the network can view the files is because it's mounted, and you've already supplied the password. To verify that it's encrypted, you could mount the partition directly and see if you can access anything.