LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-26-2016, 06:33 AM   #1
shipon_97
Member
 
Registered: Oct 2005
Location: Bangladesh
Posts: 504

Rep: Reputation: 31
Regarding File System Encryption !!!


Dear Friends ,

I am using Redhat 6.5 and want to enable filesystem encryption. In this case , I enabled encryption one of a disk during OS installation . Now I have the following 2 question :

1) If I enable 'encrypt' for a Filesystem during OS installation which types of encryption is used ?

2) And How can I reset encryption password for this scenario ?

Waiting for kind reply ..
 
Old 12-26-2016, 11:13 PM   #2
AwesomeMachine
LQ Guru
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 5,521

Rep: Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015Reputation: 1015
The password is fixed. You can't change it. The encryption algorithm is whatever the distro uses. That should be documented.
 
Old 12-27-2016, 08:56 AM   #3
rknichols
Senior Member
 
Registered: Aug 2009
Distribution: CentOS
Posts: 4,716

Rep: Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192
Of course you can change it. The encryption framework is LUKS, and the manpage for cryptsetup shows you how to add and delete passwords. (You can have up to 8 passwords or key files.)
 
Old 12-28-2016, 03:02 AM   #4
shipon_97
Member
 
Registered: Oct 2005
Location: Bangladesh
Posts: 504

Original Poster
Rep: Reputation: 31
Thx Nichols.

See the below output :

------------------------------------------------------
[root@localhost ~]# df -H
Filesystem Size Used Avail Use% Mounted on
/dev/sda5 8.7G 2.3G 6.0G 28% /
tmpfs 1.1G 0 1.1G 0% /dev/shm

/dev/dm-0 4.1G 8.2M 3.9G 1% /disk1
/dev/mapper/ncdisk 4.1G 8.2M 3.9G 1% /ncdisk
-------------------------------------------------------

Here ,

/disk1 (/dev/sda1) is encrypted during OS installation and /ncdisk is created by manually by the cryptsetup command with LUKS.
My question was ,

How I found Which encryption was used '/disk1' partition and how can I change encrypt password ?

>> When I use 'cryptsetup' command for '/disk1'---->(/dev/sda1),it shows, it's not a valid LUKS device .

[root@localhost ~]# cryptsetup luksDump /dev/sda1
Device /dev/sda1 is not a valid LUKS device.


IF 'AwesomeMachine' is right then How I can change the password for lost case .

Last edited by shipon_97; 12-28-2016 at 03:04 AM.
 
Old 12-28-2016, 11:55 AM   #5
rknichols
Senior Member
 
Registered: Aug 2009
Distribution: CentOS
Posts: 4,716

Rep: Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192Reputation: 2192
The output from "lsblk -f" (run as root) would be helpful here.
 
Old 12-28-2016, 03:41 PM   #6
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,253
Blog Entries: 4

Rep: Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777Reputation: 3777
Now, if it were me, I would not bother to use software disk encryption. Purchase a disk drive (or controller) which has on-board (hardware) encryption capability. In my experience (and, "Your Mileage May Vary™"), software encryption exacts a serious performance penalty for a machine that actually has work to do.

Also, it is often the case that only a small amount of data needs to be encrypted, and there are "encrypted folder" technologies available for these purposes. (Basically, you "mount" the encrypted folder.) These are much more targeted such that the overhead of software encryption is much more manageable: you're only encrypting what you really need to. (And, these should not be, say, "MySQL databases" or anything that's going to get a lot of activity. "A folder of confidential documents," say ...)

Last edited by sundialsvcs; 12-28-2016 at 03:43 PM.
 
Old 12-29-2016, 12:05 AM   #7
shipon_97
Member
 
Registered: Oct 2005
Location: Bangladesh
Posts: 504

Original Poster
Rep: Reputation: 31
Thanx nichols . I can change the password .
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
file system encryption shipon_97 Linux - Newbie 8 10-24-2016 09:49 AM
[SOLVED] Non-system partition encryption versus container-file encryption of equal size Ulysses_ Linux - Security 13 07-17-2015 07:38 PM
File System Encryption Options carlosinfl Linux - Security 1 09-10-2008 10:12 AM
file system encryption on servers Synesthesia Linux - Security 2 06-05-2006 04:03 PM
File System Encryption raja1979 Linux - Security 2 12-23-2005 05:08 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 01:11 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration