LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Thought about Linux security... (http://www.linuxquestions.org/questions/linux-security-4/thought-about-linux-security-738252/)

varewoolf 07-07-2009 04:10 AM

Thought about Linux security...
 
We all know that is a much better OS in the Security aspect than windows..well i have some thought about the security in linux..

we all know that we could alter the root password of linux on the grub boot level.,.. so what is the security i can bind to my laptop...wat if i lost it or theft..how can i protect the data....archiving the whole data with password is a not practical approach...i have done to access another linux box using my knoppix once..so is there any ultimate to vault ur linux box from unauthorised access...

vharishankar 07-07-2009 04:26 AM

Unfortunately if somebody gets physical access to a machine, there's any number of ways to bypass the software level security you might have use. At the lowest level, somebody can use a disk dump utility and take away all your data.

Of course, to have some level of restriction, you could use a BIOS password, even that is not 100% safe. Encrypted file system for your sensitive data could also help.

nowonmai 07-07-2009 04:53 AM

Full disk encryption, preferably with multi-factor authentication is the only way to do for defense against physical access.
Truecrypt provides full disk encryption, but unfortunately can't utilise the TPM (yet), so is limited to single-factor authentication... i.e. password. You could always use a device like a Yubikey in static-password mode to enter a cryptographically strong password (long & random).

anomie 07-09-2009 05:14 PM

I'm inclined to believe that disk encryption (even w/ just single-factor authentication) is sufficient to discourage all but the most persistent of laptop thieves. i.e. If the FBI is trying to get access to your laptop data, they're going to get it. If some kid does a smash and grab on your vehicle, he'll give up and install Windows.

nowonmai 07-10-2009 03:04 AM

Quote:

Originally Posted by anomie (Post 3602665)
If the FBI is trying to get access to your laptop data, they're going to get it. If some kid does a smash and grab on your vehicle, he'll give up and install Windows.

Absolutely, on both counts. All the FBI (or any law enforcement agency) need to do is threaten you with a 'willful impediment' charge and you'll be forced to give up whatever keys you have.


All times are GMT -5. The time now is 08:21 AM.