LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-16-2009, 12:20 PM   #1
theriel
LQ Newbie
 
Registered: Jan 2009
Posts: 3

Rep: Reputation: 0
HDD access password


Hello!
I was wondering if there is any possibility to password protect *the general access* to the external HDD? I would like to avoid encryption.

So, generally the idea: HDD's electronics will not respond unless provided a password. I do not want one particular o/s block the access to this particular HDD. I want anybody taking the HDD anywhere and connecting it, being prompted a password before reading any information - e.g. about partitions which are on this disk. So something like "partition table ecryption". Or anything having similar effect.

The point is that I have quite many partitions and encrypting all of them would be too much trouble (I'd have to give over 6 passwords to boot and make some simple operations).

Thank you for help!

P.S. Partitions are of different type, ext3, ext2, fat32, ntfs etc.

Best regards,
Theriel
 
Old 01-16-2009, 12:32 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,635

Rep: Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965Reputation: 7965
Quote:
Originally Posted by theriel View Post
Hello!
I was wondering if there is any possibility to password protect *the general access* to the external HDD? I would like to avoid encryption.

So, generally the idea: HDD's electronics will not respond unless provided a password. I do not want one particular o/s block the access to this particular HDD. I want anybody taking the HDD anywhere and connecting it, being prompted a password before reading any information - e.g. about partitions which are on this disk. So something like "partition table ecryption". Or anything having similar effect.

The point is that I have quite many partitions and encrypting all of them would be too much trouble (I'd have to give over 6 passwords to boot and make some simple operations).

Thank you for help!

P.S. Partitions are of different type, ext3, ext2, fat32, ntfs etc.

Best regards,
Theriel
Unless you design and build custom drive electronics, you're out of luck. You can't prevent access to a drive, unless you encrypt it. Things like truecrypt and pointsec do this, to prevent unauthorized access to drives in the event of loss/theft.
 
Old 01-16-2009, 05:40 PM   #3
theriel
LQ Newbie
 
Registered: Jan 2009
Posts: 3

Original Poster
Rep: Reputation: 0
Heh, OK so it seems that I'm stuck with encryption.

Would you be so kind and tell me which one to choose: TrueCrypt or LUKS? I tried Google but except for one strange test (showing that LUKS is 3x faster) I haven't found anything more... Any differences in features?

Best regards,
Theriel

Last edited by theriel; 01-17-2009 at 07:44 AM.
 
Old 01-16-2009, 08:14 PM   #4
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,249
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
The only hard drive I have seen that requires a password pre-access, is the Seagate Momentus FDE (Full Disk Encryption) Hard drives, that are available in some Dell Laptops that have the Hardware/Firmware necessary to support those drives.. (they do work rather well btw..)


http://www.seagate.com/www/en-us/pro...ntus_7200_fde/
Quote:
The Seagate® Momentus® 7200 FDE drive delivers up to 320 GB of secure digital storage using Seagate Secure™ technology, which is designed to prevent data breaches due to loss or theft on the road, in the office and in the data center. Seagate Secure technology also enables secure disposal and repurposing of drives. Additionally, customers can order the G-Force Protection™ model (ASG) and get additional robustness built in.

Advanced security firmware allows for pre-boot authentication in the form of biometrics, passwords or smart cards. The hardware-based encryption engine delivers security without the overhead—no processor utilization, no time delays. You get transparent security without the hassle.

It appears LaCie released an external unit that requires biometric access, but I know nothing of them..
http://www.lacie.com/au/company/news/news.htm?id=10307
http://www.lacie.com/products/product.htm?pid=10872
 
Old 01-16-2009, 08:14 PM   #5
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,249
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
The only hard drive I have seen that requires a password pre-access, is the Seagate Momentus FDE (Full Disk Encryption) Hard drives, that are available in some Dell Laptops that have the Hardware/Firmware necessary to support those drives.. (they do work rather well btw..)


http://www.seagate.com/www/en-us/pro...ntus_7200_fde/
Quote:
The Seagate® Momentus® 7200 FDE drive delivers up to 320 GB of secure digital storage using Seagate Secure™ technology, which is designed to prevent data breaches due to loss or theft on the road, in the office and in the data center. Seagate Secure technology also enables secure disposal and repurposing of drives. Additionally, customers can order the G-Force Protection™ model (ASG) and get additional robustness built in.

Advanced security firmware allows for pre-boot authentication in the form of biometrics, passwords or smart cards. The hardware-based encryption engine delivers security without the overhead—no processor utilization, no time delays. You get transparent security without the hassle.

It appears LaCie released an external unit that requires biometric access, but I know nothing of them..
http://www.lacie.com/au/company/news/news.htm?id=10307
http://www.lacie.com/products/product.htm?pid=10872
 
Old 01-17-2009, 07:44 AM   #6
theriel
LQ Newbie
 
Registered: Jan 2009
Posts: 3

Original Poster
Rep: Reputation: 0
Mhm, thank you.... could then sb suggest which encryption to choose: TrueCrypt or LUKS?

After some research I discovered only these two differences:
->TrueCrypt provides deniable encryption: entering different passwords gives different levels of access to the data. Sounds interesting if you want to have some data hidden and impossible to be traced.
->TrueCrypt doesn't have any recognizable header in its partitions. LUKS does. Hence somebody knows that: "hey, here there is an encrypted partition!".
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Monitoring HDD access dudds Linux - General 4 12-29-2006 08:21 AM
reset unkown HDD password Sandeck Linux - Security 10 06-12-2006 01:01 PM
PCMCIA HDD (How do I access it?) cwwilson721 Slackware 1 03-03-2006 08:26 PM
Hdd decryption, password is known tola555 Linux - Security 8 09-17-2005 02:32 PM
Multiple access to the same HDD F0ul_Olli Linux - Hardware 3 09-07-2005 11:15 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration