LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-01-2005, 03:15 PM   #1
munkie_poo
Member
 
Registered: Apr 2004
Location: Newcastle, UK
Distribution: Slackware 10.2
Posts: 134

Rep: Reputation: 15
protecting home directories


I run slackware and Im a bit paranoid about people accessing my home dirctories, If I was to used a live Distro like knoppix, could I access the home directories? Also if I placed my hard drive containing the home folders into another linux system, would that be able to read them?

If so, could someone point me in the right direction to secure the drive.

thanks
 
Old 07-01-2005, 03:32 PM   #2
qwijibow
LQ Guru
 
Registered: Apr 2003
Location: nottingham england
Distribution: Gentoo
Posts: 2,672

Rep: Reputation: 47
Yep, anyone with physical access to your computer can boot up in single user mode, and do whatever they like.

If you need to keep your home directory private, you need to look into file system encryption.

the program you need is called cryptsetup.
use the newer dm-crypt driver instead of the old crypt-o-loop.
you will need a 2.6 kernel.

there are many cryptsetup tutorials floating around, use the search function or google.
 
Old 07-01-2005, 04:05 PM   #3
munkie_poo
Member
 
Registered: Apr 2004
Location: Newcastle, UK
Distribution: Slackware 10.2
Posts: 134

Original Poster
Rep: Reputation: 15
Thanks, thats exactly what Im after.

In general is it hard to setup? I will read about it, no need to get into detail.

and would this effect performance, for games etc?

Last edited by munkie_poo; 07-01-2005 at 04:24 PM.
 
Old 07-04-2005, 04:55 AM   #4
qwijibow
LQ Guru
 
Registered: Apr 2003
Location: nottingham england
Distribution: Gentoo
Posts: 2,672

Rep: Reputation: 47
Only your home partiton is encrypted, so performance when working on large files in your home directory will be effected.

For example, if you were trying to author a DVD which was saved in the home partiton, performance would be a little slower, (unless you first coppied the dvd into the /tmp/ folder.

In other words, No, performance will be un-effected.

Is it hard to setup....Not really, but i suppose it cvhanges depening on how new you are to linux.

You will probably also want to setup pam_mount.
This is a program capable of using your normal login passwerd to de-crypt your home partiton when you loggin, and automatically lock the partiton when you log out.

it works like so...
lets say you have a encrypted home partiton on /dev/hda4 (OR en encrypted disk image on /home/myHome.encrypted)

when you login, anouther /dev/ node is created in /dev/mapper/yourHome
this node knows your password, when mount it, then write to your home partiton, anything you write is on the fly transparently encrypted and stored to your encrypted home... anything you read is on the fly decrytped from the encrypted home.

In other words, once its setup, you dont even notice any differance, other than your home partiton is completely empty untill you loggin with the correct password.

Last edited by qwijibow; 07-04-2005 at 05:00 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache Root/Home Directory and setting up FTP for home directories? Mankind75 Linux - Newbie 6 07-23-2006 02:37 PM
securing /home directories danimalz Debian 21 11-30-2005 03:30 AM
Way to limit home directories.... anon111 Linux - Software 1 04-12-2005 08:34 PM
Password protecting directories in apache niverson Linux - Security 6 03-02-2004 10:40 PM
password protecting directories jayakrishnan Linux - General 2 02-10-2003 05:49 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration