I've setup an ecryptfs folder which I can easily mount/umount as su.
Inspite of adding a `user' option in fstab I'm unable to mount the folder as normal user: mount secret
Code:
Passphrase:
Error attempting to evaluate mount options: [-22] Invalid argument
Check your system logs for details on why this happened.
Try updating your ecryptfs-utils package, and/or
[Code]....
I have an ecryptfs partition on a usb drive, system runs Debian squeezeWhat I'd like to have is that when I connect the drive it will be auto. mounted and I'lleither have to enter the passphrase or it will already be in the keyring (even better).It seems ecryptfs can auto-mount a directory but I want to auto-mount an entire encryptd partition. Is this possible?.Also, can I have another encrypted directory, say ~/Private, at the same time or can ecryptfs handle only one at a time?
View 3 Replies View RelatedI'm trying to install eCryptfs in my new Slackware system. ./configure runs pretty well, without errors, but when a try to run `make` i got this:
[...]
main.c:25:22: error: pk11func.h: No such file or directory
main.c: In function 'do_hash':
main.c:77: error: 'SECStatus' undeclared (first use in this function)
[code]....
But i do have 3 copies of pk11func.h under:
/usr/include/seamonkey-2.0.4/pk11func.h
/usr/include/seamonkey-2.0.4/nss/pk11func.h
/usr/include/nss/pk11func.h
What's going wrong?, why the compiler can't find the header if it's installed? I don't have too much experience compiling package, and it's the first time i try to it in Slackware.
I have debian as an NFS client. I would like to mount a remote NFS with a specific user permissions (to specify the remote user account)
View 2 Replies View RelatedI am truly sorry if this has already been answered, but I don't think the question was asked in EXACTLY THE SAME WAY, maybe?
I installed Slackware 13.37 on my Dell desktop pc (I don't think that the model information is relevant in this case...), and I was able to insert CD's and DVD's which would then be mounted AUTOMATICALLY so that I could then browse the contents etc. I can STILL do this, whether or not I am logged-in as "root" or as a "normal" user...
Now here is my problem : I JUST installed Slackware 13.37 on my Toshiba notebook (a Satellite 210, in this case) TODAY. Now, I can insert the same CD's / DVD's into the drive and have them automount as the "root" user, but when I log in as a simple user, I get errors telling me that they can NOT BE MOUNTED! The messages on quite long and complex, but I can paste an copy into a secondary post if that will help. For my part, what the error message says is a lot of gibberish!
I have examined the user information on both my desktop AND laptop computers to see if there were any major differences, and there are NONE EXCEPT FOR ONE : My "user" account on my desktop is user # 1000, while on my notebook it is 100. The DEFAULT offered in both cases was 1000 when I created the accounts, but I did not see
why the next user in the list should be over 999 higher than the last one listed, so on the notebook I did not accept the default offered, and instead choose to use # 100. Was that wrong? Why does Slackware start the first created user at such a large user number?
I did NOT do anything to allow the automount of optical disks as a user on my desktop pc (at least, not to my knowledge...) that I have not done on the notebook!
I am writing this software that creates virtual block device nodes almost like loop does. I need to allow non-superusers to mount and umount filesystems from these devices. I don't know the names of the block device nodes beforehand so i can't use fstab entries to add "user" or "owner" flags there.
Currently i solve this by providing a small suid helper tool that verifies that this is indeed "my" block device the user is trying to mount and then just call /sbin/mount or /sbin/umount to do the job. This is definitely better than setting a suid bit for the whole program but not really perfect.
I have a directory, /root/backup, that I mount and run a bunch of rysnc scripts against to backup my box. I'm running into a very recent problem where when I run this command:
A directory that once looked like this:
Goes to this:
It changes from root to www (another user on my system) and I have no idea why.
When I look at the /mount/procs file, I see this:
So it looks like the uid is correct...
I believe this is what is causing my rsync scripts to fail (they only copy over directories and not the files in those directorys and I get a lot of permissions failed errors)
All of this is run as root in cron jobs
As a note, here is a sample rsync command:
In my machine, there are 2 mount points - / and /userdata. From the root user, I want to create an oracle user at the /userdata mount point, i.e the home of the oracle user should be mounted on /userdata.
View 7 Replies View RelatedI am unable to mount my ext hdd as normal user ,i am using xfce Unable to mount "80G Volume":
Rejected send message, 1 matched rules; type="method_call", sender=":1.23" (uid=1000 pid=2776 comm="exo-mount) interface="org.freedesktop.Hal.Device.Volume" member="Mount" error name="(unset)" requested_reply=0 destination="org.freedesktop.Hal" (uid=0 pid=1908 comm="/usr/sbin/hald))
I have a vfat partition under RedHat RHEL5 that I currently must mount manualy after each boot. I would like it to auto-mount but I cannot find a way to do this without it becoming ro except for root. My other partitions auto-mount just fine. I have tried the vfat as a separate partition and as a VLM logical drive (as it currently is).
The fstab statement:
"/dev/VolGroup00/LogVolDos /dos vfat noauto,users 0 0"
allows me to mount it as a user. The statement:
"/dev/VolGroup00/LogVolDos /dos vfat defaults 1 2"
is what I use for other VLM partitions, but for the vfat it seems to only allow root access. Manually mount this partition is OK, it's just that I have sometimes forgotten and then it is not included in backups. What do I need to do to make the vfat auto-mount as accessible for a user?
How can I mount a device with specific user rights on start up? I still have some problems figuring it out. I would like to mount the divide with uid=1000 and gid=1000. My current entry to the /etc/fstab/ file looks like this:
dev /var/www vboxsf rw, suid, dev, exec, auto, nouser, async, uid=1000
i'm in search of Script that sends a mail to the user if the mount point goes beyond 80% of its full space.
send mail is configured in the system so that it can communicate with mail server.
I want to simply mount an ext4 file-system onto a normal mount point in Ubuntu (/media/whereever), as read-writable for the current logged-in user, i.e. me.
I don't want to add anything into /etc/fstab, I just want to do it now, manually. I need super-user privileges to mount a device, but then only root can read-write that mount. I've tried various of the mount options, added it into fstab, but with no luck.
What I'm trying to do is to grant my regular user to locally mount partitions and shutdown the machine without a password. Here is what I've done to /etc/sudoers:
Code:
Host_Alias LOCAL = localhost
Cmnd_Alias SHUTDOWN = /sbin/shutdown
Cmnd_Alias MOUNT = /bin/mount, /bin/umount
<my_username> LOCAL=(root) NOPASSWD: SHUTDOWN, MOUNT
%wheel ALL=(ALL) ALL
My user is a member of wheel group and I want to type the password for each sudo command except for shutdown and mount. However I am asked for a password whenever I execute "sudo mount [...]" or "sudo shutdown [...]".
My linux workstation recently crashed. After rebooting, Linux (Red Hat 5.3) will not boot properly and automatically went into emergency mode or recovery mode i think. I can still see my /home/user/ and all the files inside.I boot from CD to rescue mode and tried mounting read-only the /dev/sd5 which contains the files in the crashed hard disk to try to copy out my files but mounting was unsuccessful (invalid argument). I checked the filesystem type using fsck -N /dev/sda5 and shows it to ext2. i tried to mount another known working hdd and was successful.
My question is why in emergency mode, the crashed hdd is able to be mounted automatically as read-only but cannot be done in rescue mode thru a bootable CD?Is there any special mount options used in emergency mode?I also cannot copy out in emergency mode booting from the crashed hard disk as everything is read only.
In my home directory, when I type
Code:
du -hs
I get
Code:
215G
[Code]....
which is approximately HALF the space than actually needed. Is this increase due to ecryptfs? Also I noticed that the hidden folders are not shown. Are the hidden files within the shown folders included in this list? How do I show a summary which includes the hidden files?
I recently had to install ubuntu 10.10 through wubi because my olde ubuntu broke after a failed upgrade. Now I am quite happy with everything in 10.10 except I can't get to the files in my olde home folder because I chose the home folder encryption option in the installation process. How can I recover my home folder? They all seemed to be recovering from another user not another partition.
View 9 Replies View RelatedAfter years with debian stable I'm testing debian...testing (stretch) in a separate partition. I'm just using the stretch repositories and nothing else, so that I won't mess up the system by pulling packages from different branches.
Unfortunately ecryptfs-utils is not (yet) available on stretch. Is there any safe way to use this package on my debian stretch, preferably the stable package from jessie?
How long it will take for this package to reach stretch from unstable?
I'm backing up my data asap. However, I am getting hundreds, maybe thousands of disk I/O errors when trying to run everyday programs, such as sqlite and firefox. Looking at dmesg, I see these items repeated many, many times:
[Code]....
[ 5196.943225] Valid eCryptfs headers not found in file header region or xattr region [ 5196.943232] Either the lower file is not in a valid eCryptfs format, or the key could not be retrieved. Plaintext passthrough mode is not enabled; returning -EIO
I used ecryptfs on a Private directory. It has about 5GB of data, but no matter what I do I can't free space in there. I have tried to delete some GBs to no avail. System monitor still shows me 5GB.
View 3 Replies View RelatedOn a fresh karmic install, I have a user account with ecryptfs enabled home directory. I want that directory to be secured when I log out.
I have two administrator accounts, user1 and user2. I log in as user1 (with ssh, will test regular logins tomorrow), /home/user1/.Private gets mounted to /home/user1, everything is fine. I log out.
I log in as user2, and /home/user1/.Private is indeed unmounted. But I can do
Code:
sudo su - user1
which will ask me for the password of user2, and then I am logged in as user1, /home/user1/.Private is again mounted, without ever typing the password of user1.
On the other hand if I invoke
Code:
ecryptfs-umount-private
[Code]....
Ubuntu 10.04 LTS Ran some updates,finally got around to rebooting. When I rebooted, It came up with Some errors about missing files. Came to discover my home directory was not decrypted. I simply had a readme file that said to run "encryptfs-mount-private". When I do it doesn't tell me the passphrase is incorrect, it tells me
Code:
Inserted auth tok with sig [xxxxxxxxxx] into the user session keyring You do not own that encrypted directory and I do own it. If I put in a different pass it tells me it's incorrect, I'm logging in fine, but my home directory is remaining encrypted.
I have a fresh install of Kubuntu 11.04 and I already have the lastest ecryptfs-utils installed. I have the ".Private" folder but not the "Private" folder.
When I try to set it up I get this error:
Quote:
$ ecryptfs-setup-private
ERROR: wrapped-passphrase file already exists, use --force to overwrite.
How do I get my "Private" folder to appear? I don't think I should just be throwing my stuff into ".Private" and I don't want to have to see all the hidden folders all the time either. Should I use the --force argument, and what would that do?
After a disastrous upgrade to 10.04 I am at my wits end trying to recover my /home partition from my unbootable system. The /home partition is part of a RAID5 array across 4 disks and I've been trying to use some disk imaging tools from Ultimate Boot CD to recover it with, but none of the utilities seem to recognize or will let me work with my multi-disk device.
Currently I've been booting up with a Live CD in attempts to mount the encrypted partition then copy all the files to an external device I bought, but the mounting process has presented me with some problems. The partition in encrypted with ecryptfs and I have both the disk's passphrase as well as an FNEK signature to work with. Attempting the following:
Code:
Another small issue is the cipher I used. I don't remember which kind of encryption the disk is encrypted with (80% sure it's aes though). I assume figuring out which cipher I used will be more like a guessing game through the ecryptfs mount prompt, but I'm wondering if this would affect the error message I get.
I'm getting "Low Disk Space" warnings in Ubuntu 10.04, because of eCryptfs, which somehow manages to eat up twice as much disk space as an unencrypted partition normally would.When I click "Examine" this is the picture that I see:(the blurred out part is my username of course)Why is this happening?And most importantly, what can I do about it?Does Ubuntu expect me to buy twice as much disk space just to encrypt it?!
View 9 Replies View RelatedI just installed ecryptfs (debian Lenny). However, when I try to run it (as normal user), I get the following
$ ecryptfs-setup-private Enter your login passphrase: And it wont accept any password (naturally since this is the first time I'm running it).
Right, I seem to get very random system crashes. My machine will stay up for long periods of time, or sometimes only a few mins, also it doesn't seem related to just using a particular program. As you can imagine this is leading to a bag of woes. After reading on a forum about logs I went to /var/log and in the system log found the following entry . . .
"Jan 10 18:46:10 jon-desktop kernel: [ 92.718896] Either the lower file is not in a valid eCryptfs format, or the key could not be retrieved. Plaintext passthrough mode is not enabled; returning -EIO"
This is repeated multiple times and having checked after a few crashes seems to be the central problem. Being specific about the crashes, they freeze the entire system. Can't ctl-alt-del and sound loops, have to hard reset. I have a feeling that when I first installed Ubuntu 9.10 I selected to use an encrypted file system but have a feeling that I didn't set it up correctly. Not sure exactly what I didn't do but I seem to remember it was to do with generating a passphrase. So . . .
1) What is this error from my logs?
2) Is it linked to me not setting up the encrypted filesystem correctly?
3) Is there a way to check the settings / sort them out properly?
4) Is there documentation for my dullard state which can aid me in this, or is it quite simple?
Im mounting a directory, that I need to be accessible from a normal user's desktop.
mount -t cifs -o credentials=/root/.creds //192.168.100.226/mountpoint/ /mnt/mountpoint/
But it is giving /mnt/mountpoint permissions as 770, root:1003
How do I change that group to... 501?
if it's possible to use a white or blacklist to control which folders are ecryptfs encrypted when you're using the "encrypted home folder" option.
Of course I can always create an extra folder outside of my ~ and then symlink what I don't want encrypted into it, but I'd rather that it's possible to create like, ~/.ecryptsfs/excludelist with a list of paths that shouldn't be encrypted.
This is not a particular Fedora issue, but I take the chance
How can I mount a network (nfs) drive (on a RHEL4 machine) from my FC11, but as another user.
E.g. I would like to mount the folder /home/userA on the network drive. But my local username is userB. Hence I don't seem to have access to mount the drive.
sudo mount -t nfs eda4:/home/userA /mnt/eda4 gives the message: "mount.nfs: access denied by server while mounting (null)"
I have put a broadcast address in /etc/exports and started an nfs daemon on the remote server.