Thought about Linux security...

varewoolf · 07-07-2009, 04:10 AM

We all know that is a much better OS in the Security aspect than windows..well i have some thought about the security in linux..

we all know that we could alter the root password of linux on the grub boot level.,.. so what is the security i can bind to my laptop...wat if i lost it or theft..how can i protect the data....archiving the whole data with password is a not practical approach...i have done to access another linux box using my knoppix once..so is there any ultimate to vault ur linux box from unauthorised access...

vharishankar · 07-07-2009, 04:26 AM

Unfortunately if somebody gets physical access to a machine, there's any number of ways to bypass the software level security you might have use. At the lowest level, somebody can use a disk dump utility and take away all your data.

Of course, to have some level of restriction, you could use a BIOS password, even that is not 100% safe. Encrypted file system for your sensitive data could also help.

nowonmai · 07-07-2009, 04:53 AM

Full disk encryption, preferably with multi-factor authentication is the only way to do for defense against physical access.
Truecrypt provides full disk encryption, but unfortunately can't utilise the TPM (yet), so is limited to single-factor authentication... i.e. password. You could always use a device like a Yubikey in static-password mode to enter a cryptographically strong password (long & random).

anomie · 07-09-2009, 05:14 PM

I'm inclined to believe that disk encryption (even w/ just single-factor authentication) is sufficient to discourage all but the most persistent of laptop thieves. i.e. If the FBI is trying to get access to your laptop data, they're going to get it. If some kid does a smash and grab on your vehicle, he'll give up and install Windows.

nowonmai · 07-10-2009, 03:04 AM

Quote:

Originally Posted by anomie

If the FBI is trying to get access to your laptop data, they're going to get it. If some kid does a smash and grab on your vehicle, he'll give up and install Windows.

Absolutely, on both counts. All the FBI (or any law enforcement agency) need to do is threaten you with a 'willful impediment' charge and you'll be forced to give up whatever keys you have.