General :: Process Of Encrypting RAM While Still Using As RAM?
Jun 21, 2010
From previous post I have a netbook from work that I have Debian Squeeze running on and did a full disk encryption (minus the minimal boot loader in /boot) in case it gets stolen. However, with a laptop/netbook it has a battery and I believe the encryption protocol (LUKS - correct me if I'm wrong) uses RAM to store the decrypt key. So if someone is quick they can dump RAM and analyze it until they get the key. Or even if the key is not stored there they could dump RAM which would have recent files cached unecrypted.
Is there an easy process of encrypting RAM while still using as RAM? What I mean by that is I know you could make a ramdisk sort of like how Live CDs do and encrypt that, but at best (that I know of) I can only mount it as swap space.
View 14 Replies
ADVERTISEMENT
Jan 8, 2011
How would I go about encrypting my lvm2 logical volumes on Debian Squeeze? Is it possible without backing everything up to a different drive and restoring afterwards?
View 3 Replies
View Related
Sep 16, 2010
Is it possible to encrypt the Entire root file system using LUKS.I am currently using Ubuntu 10.4 LUCID.After several hours of Google ,most of the articles were focusing to "Encrypting a drive/removable media ".. My aim is to encrypt whole File system which is currently using.
My Concerns, How to Encrypt a running file system? Will it lead to data loss?
View 1 Replies
View Related
Aug 6, 2010
On my laptop (Dell Studio 1745) w/500GB HD, I have a common data partition shared by openSUSE. Fedora, FreeBSD, and windoze 7 currently. I would like to encrypt this partition (/Common) and have it accessible from all distros either with a passphrase key in /root or on a flash key. I've been researching on the web and there seem to be several possibilities using eCryptfs, Luks, cryptosetup, or any of several methods.
My question is, what have people here used and how well did it work? Also, what was required for setup (I'll probably have to explain/teach it to my wife who is technology challenged-but I still love her anyway) and my daughter who's just getting into linux. I would like to be able to keep the entire directory on the hard drive but also have the ability to copy it to external USB device for transport.
View 4 Replies
View Related
Jan 29, 2011
I've recently brought a Western Digital Elements 2TB external hard disk and have been planning to encrypt it for use as a backup drive. However, it seems that these 2TB disks use the new 4K sector sizes and thus need to be handled more carefully than the older 512K ones.
After spending a week looking on Google, I have to admit I'm pretty confused and hope somebody here might be able to verify my conclusions
The drive reports that it's a 512-sector drive which is probably false. Using fdisk -uc, the original partition starts at sector 2048 so I assume that is a valid sector also to start a dm-crypt partition overwriting the previous one?
I've also read that every layer that is added to these drives must support the 4k layer. That means both dm-crypt and the ext3 filesystem I intend to put it on have to do so also.
Looking through the cryptsetup document, it states under the option "--align-payload" the following:
"Align payload at a boundary of value 512-byte sectors. This option is relevant for luksFormat. If your block device lives on a RAID, it is useful to align the filesystem at full stripe boundaries so it can take advantage of the RAIDs geometry. See for instance the sunit and swidth options in the mkfs.xfs manual page. By default, the payload is aligned at an 8 sector (4096 byte) boundary."
The fact that the payload is aligned at 4096 seems to indicate to me that it should be fine using default settings. Does everybody agree with this? Or do I need to take special measures due to the dm-crypt headers?
When I later finish up the dm-crypt layer, then I need to put ext3 on it. I understand adding -b 4096 to the mkfs.ext3 command will resolve that. Is that also correct and will it work well in combination with the dm-crypt layer?
View 4 Replies
View Related
Jan 8, 2010
I want to encrypt Full partition instead of creating a file and encrypting it, and also want to move this disk to another server. do i need some files also (that hold keys) with my self on new server. i am using FC11.
View 2 Replies
View Related
Jan 8, 2010
one tell me the internal working of kill command. that is how it kills a process internally or from where it picks file to continue its process.
View 3 Replies
View Related
Jan 21, 2011
I have a high priority service that I start with sudo nice -n -10 process. This process does not need superuser rights though, except for the priority elevation. But nice requires superuser privileges to elevate priority.
View 3 Replies
View Related
Jun 12, 2010
send the details raid configuration how to use in linux el5 and how to indentify the raid degrade process and how to rebuilt the process.
View 4 Replies
View Related
Sep 8, 2010
Code:
#include <stdio.h>
#include <unistd.h>
#include <signal.h>
[code]....
Description of what the code does or what i intended to do:
1. Created a child process from parent process using 'fork()'
2. Sent a signal 'SIGALRM' from child process to parent process using 'sigqueue' function.
(The Third parameter of 'siqueue' function contains the message (message msg) which the child process wants to send to the parent process.'msg' is a stucture instance containing a) pid of child and b) string) 5. Print the 'msg' sent by child process inside the signal handler function 'sig_action_function' of the parent process I am getting some junk value when this line is executed
Code:
printf("%d
",msg->cpid);
I expected to get the pid of child process, which the child process sent to parent process through the signal.
View 3 Replies
View Related
Aug 12, 2010
as we all know Process Scheduler does Process scheduling and its a process as well. I was just wondering that if this happens then the Process "Process Scheduler" should be a part of Process queue as well.
So if there are 5 process are there in Process queue & process scheduler is administrating them then since its also a process, once it puts a process under RUN state it should itself go inside queue because at one instant only one process can get executed on a processor. This is quite confusing for me. Please help me out. I tried to search on this but could not find any relevant topics.
View 1 Replies
View Related
May 4, 2010
How do you find the parent process of zombie processes?
When the child process is something where the parent is not entirely obvious...
Is there some way to list processes in tree format or something?
View 3 Replies
View Related
Nov 9, 2010
I have a process running on Linux.When i do ps -eaf | grep <myProcess>, it show muliple entries for <myProcess> with different pids for each entry.Kindly tell me what could be the reason for a process having multiple pids?
View 1 Replies
View Related
Mar 23, 2010
I want ro ran new commandy after sungrid finish his task.Exp:qsub -q bla command1; command2 command2 start only when job of command1 finished.
View 9 Replies
View Related
Nov 16, 2010
I've been running my shellscript for about half an hour now. It's taking longer than I thought to process all the data. I have the process ID of it. Is it possible to save the process and log out then log in and continue the process? I know how to pause a process using kill -pause pID and continue it using kill -cont pID. But that only work if you don't log out after pausing it.
View 5 Replies
View Related
Mar 10, 2011
I want to kill parent process after "fork()" method. but if I kill parent process with "exit(0)" method, main() thread is terminated as well so child prosess doesn't work anymore. Is there any way to kill only parent process without affecting to child process?
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
[code]....
View 1 Replies
View Related
Mar 27, 2011
When I use the -p switch for the package p7zip-full (program 7z), it only password protects the extraction process but it still shows the list of files when you try to view the contents of the archive whereas the graphical compression utility has a feature to not show the list as well. I read the man page and can't find the feature for the CLI equivalent. how to do this using the CLI?
View 1 Replies
View Related
Jan 6, 2011
I have a problem with the evolution mail client. I have created a privat PGP key. Now I'd like to attach my puplic key to a E-Mail in order xchange the puplic keys with friends.I'm not able to find a option like "attach my privat key".I also wasn't able to find a solution by searching the web
View 1 Replies
View Related
Oct 29, 2010
I have an Ubuntu 10.04.1 LTS server that I set up a while back and I am considering encrypting the whole box. I store everything on the server and if it were stolen from a home robbery it could be quite devastating. The server is using two 750 GB SATA hard drives formatted with LVM. Inside the LVM I have a small partition on the first drive for the OS, SWAP, and everything else on the first and second drive is /var/media which is where I store all the data. I have set up an encrypted LVM on my laptop but that was during the install using the automatic method.
I can't figure out how to do what I want to do and I don't want to risk destroying the data on the server. What I would like is to non-destructively encrypt the server (System, SWAP, and DATA partitions) similar to how TrueCrypt works on Windows and I'd like the encryption key to be stored on a USB thumb drive so when the server boots it requires a hardware key. (And have the encryption key backed up online in case the flash drive dies.) And I'd like to use AES 256.
Code:
View 1 Replies
View Related
Jun 13, 2010
I'm looking to create an encrypted container file on a samba share, and then mount this locally. I have the following snippet working but only for fat32, and I cannot work out how to get ext3/4 going -
If I format the container as ext3 I can mount it, but never as read write.
View 3 Replies
View Related
Jun 24, 2010
We use a squid proxy server for all http traffic. Is there any way to configure squid so that all traffic which squid and workstation communicates is SSL and encrypted ?
View 2 Replies
View Related
Jan 1, 2010
Currently I'm using Ubuntu 9.04 and when I installed it I got a question if I want to encrypt disk contents. I answered no. Now I think it is good idea to have such possibility. So is it possible to have the same encryption on running system ?
View 14 Replies
View Related
Nov 25, 2010
Kernel 2.6.21.5, Slackware 12.0
Firefox 2.0.0.20
When sending an LQ post, my browser says "You're about to send information that's not encrypted". OK. I tell him not to show the warning again. But what if I want to encrypt? How do I do it?
View 1 Replies
View Related
Jun 17, 2009
i have recently installed thunderbird on my fedora 11 box and so far so good. i am interested in encrypting my emails and digitally signing them as well. does anyone have documentation as to how i can do this? i messed around with it last night but i was not able to import a valid certificate.
View 14 Replies
View Related
Dec 12, 2009
I'm installing fedora 12 on a laptop using the live cd, and I have a few questions about the encryption process.
First, I'd like to fill the drive with random data. I've read the fedora documentation and it suggests using the following command: dd if=/dev/urandom of=<device>. The installer didn't offer an opportunity to do this, so I opened a terminal and typed the command. I expected it to take hours on my 160 gig hard drive, but it only took about 3 minutes, and indicated about 600 megs of data had been written. Did I do it correctly? According to palimpsest, my boot partition is sda1 and the other partition is sda2, so that's the one ran the command with.
Second, I need some advice on what to encrypt. The installer shows me the following layout after I select encryption:
LVM Volume Groups
Hard Drives
I know I can't encrypt boot, but I can encrypt lv_root and lv_swap. But is it necessary to do that? And tell me the pros and cons of using a boot loader password?
View 1 Replies
View Related
Dec 2, 2009
I've changed my distro from Kubuntu to Opensuse with Kde and I really like the new one.
Kde look better on opensuse as well as firefox seems to run faster. But I miss a feature I had on Kubuntu that is the encryption of my home folder (And it is essential as I want to install Opensuse on my notebook).
I would like to know if it is possible and, if it is, how to encrypt my system in order to keep all my personal data and stored passwords safe in case of someone have access to my notebook.
I liked opensuse a lot but this is the only thing that is keeping me from a complete distro change.
View 1 Replies
View Related
Jun 10, 2010
why the following doesn't work with ext3 or 4?
dd if=/dev/urandom of=/tmp/container.bin bs=1024 count=20000
sudo losetup /dev/loop2 /tmp/container.bin
sudo cryptsetup -c aes -s 256 --verify-passphrase luksFormat /dev/loop2[code].........
View 1 Replies
View Related
Oct 21, 2010
I encrypted my hard drive on my media PC but it's really annoying having to type in a password every time I turn it on. I chose a short password so it was quick and easy to type in but is it worth encrypting data with a weak password?If the computer is suspended, someone could come along and resume the computer. They would be presented with a locked GNOME session) but the data would be unencrypted; does this go against encrypting the hard drive? Or does the locked GNOME session provide enough security to keep an intruder out?
View 9 Replies
View Related
Mar 10, 2011
I downloaded shc-3.8.7.tgz and tried to install it. but i am getting error that is
make: *** [install] Error 1
I am giving the steps i followed to install shc
1. tar -xzvf shc-3.8.7.tgz
2. cd cd shc-3.8.7
3. make
4. make install
i got the following error.
*** Installing shc and shc.1 on /usr/local
*** �Do you want to continue?
make: *** [install] Error 1
View 9 Replies
View Related
Mar 6, 2010
I currently have my home folder encrypted with 128 bit encfs but i have the back up of that 'in the clear' on my back up hard drive. I am not that great with complicated instructions and especially the terminal so what if any is the easiest program to encrypt with?
View 9 Replies
View Related
