LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-01-2007, 10:59 PM   #1
Canadakid
LQ Newbie
 
Registered: Dec 2006
Location: Canada, obviously!
Distribution: Debian Sid
Posts: 7

Rep: Reputation: 0
Question Encrypting an existing filesystem?


Hello...

I'm wondering if there was any way of encrypting an existing ext3 partition with dm-crypt+LUKS or something roughly equivalent.

While searching I came across this thread where someone did this with the now-deprecated "cryptoloop" system on a non-journaled filesystem. I was wondering if it was possible to do it as I explained in the first paragraph.

Some preliminary research leads me to believe it's not possible, but I wanted to throw it out here to those who know more than me.

Thanks!
 
Old 01-03-2007, 06:30 AM   #2
Lotharster
Member
 
Registered: Nov 2005
Posts: 144

Rep: Reputation: 18
This is possible with loop-aes. However, trying to directly encrypt a filesystem is quite risky. If your computer crashes halfway through, you have a half-encrypted and half-not-encrypted filesystem. You should definitely make a backup before.
 
Old 01-03-2007, 01:30 PM   #3
Canadakid
LQ Newbie
 
Registered: Dec 2006
Location: Canada, obviously!
Distribution: Debian Sid
Posts: 7

Original Poster
Rep: Reputation: 0
Thanks. I probably won't bother, then. I keep all my really sensitive stuff in an EncFS folder anyway, so encrypting the whole partition isn't REALLY necessary.
 
Old 01-09-2007, 12:18 PM   #4
operator10001
Member
 
Registered: Mar 2006
Distribution: debian sarge
Posts: 222

Rep: Reputation: 30
it can be done. etch comes with that feature as standard. I recommend using rsa very carefully. the more bits the better.
 
Old 01-09-2007, 12:34 PM   #5
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
You don't have enough space to first put the data somewhere else (even compressed) and then encrypt the partition?
Would be easier, safer and feasible, I'm not sure the inline encryption can work.

operator10001 how do you do this? I know that the installer allows you to CREATE encrypted partition but I haven't heard of a solution to encrypt a working partition.

Last edited by nx5000; 01-09-2007 at 12:35 PM.
 
Old 01-09-2007, 08:25 PM   #6
Canadakid
LQ Newbie
 
Registered: Dec 2006
Location: Canada, obviously!
Distribution: Debian Sid
Posts: 7

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by nx5000
You don't have enough space to first put the data somewhere else (even compressed) and then encrypt the partition?
Would be easier, safer and feasible, I'm not sure the inline encryption can work.
Unfortunately I'm one of those people who never bothered to plan his partitions. hdb1 is a small /boot/ partition, hdb2 is swap, hdb3 is /

hda is my other hard drive with WinXP, which I keep around for my parents, who like to use my computer on occassion.

It's alright, though. I may be doing a re-install soon anyway, with all the important stuff on my 1GB jumpdrive. If I do that, I'll encrypt then.
 
Old 01-10-2007, 05:27 AM   #7
nx5000
Senior Member
 
Registered: Sep 2005
Location: Out
Posts: 3,307

Rep: Reputation: 57
So you wanted to encrypt hdb3 (/) while running on it ?
If that's the case, I find it a bit risky
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Encrypting an Existing FS with 'dd' ta0kira Linux - Security 2 01-24-2006 01:35 PM
Encrypting filesystem ImpactDNI Linux - Security 3 03-26-2005 10:53 AM
Dual boot "merge" from existing 98 & existing Linux atsmith Linux - Newbie 4 07-13-2003 03:46 PM
encrypting im1crazyassmofo Linux - General 1 04-20-2003 09:15 PM
using autofs to effectively symlink to an existing filesystem unsteady Linux - General 0 04-12-2001 09:10 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:17 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration