Not using filename encryption when you create a new encrypted folder is easy, but how to disable it in the home encryption that is automatically set up by the Karmic installation CD?
View 1 RepliesI ticked the box for this when I installed Lucid, but how can I verify that it's actually performing the encryption/decryption?
View 4 Replies View RelatedI am running ubuntu 11.04 I'd like to encrypt my home folder. - how can it be done, without creating new user/starting from scratch. -I'd like to keep all the files and desktop settings - the only change should be that the folder is encrypted now.
View 2 Replies View RelatedI just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
View 4 Replies View RelatedTwo questions concerning the "insert your password screen" that pops up after some minutes of inactivity: 1) How can I disable it, if I don't want it to pop up anymore? (maybe on startup, but not after inactivity) 2) If it is not disabled: During the installation of Ubuntu, it is asked whether the password chosen will be used only to unlock the screen or also to unencrypt the user's home folder. Supposing the user chose the former option, how can he currently go back and choose to also have encryption? Also: is this encryption good? Is encrypting the home folder enough to protect personal data from eventual laptop theft?
View 5 Replies View RelatedI have Ubuntu Karmic. I chose to install with an encrypted home directory. Recently I got a warning that I only had 2GB of drive space left. This is mostly because of my videos. So I went and bought a new hard drive and partitioned it and made 1 ext4 partition and copied my videos all to the new hard drive. I added a line in my fstab to mount the new hard drive to ~/videos, but when I reboot the computer, there is a screen saying something like "error mounting /home/me/videos, press S to skip or something else to reboot". If I press S to skip, then when my system comes up there is a video directory but it's empty because my other hard drive didn't get mounted. I can run sudo mount /dev/sdb video/ and it will mount fine and I can see all my videos, so why can't fstab mount it? Does this have something to do with my encrypted home directory?
View 14 Replies View RelatedI recently bought a new hard disk for my /home tree. I don't have encrypted home directories currently, but I was wondering if there is an easy way to encrypt my home directory so that it is automatically decrypted when I'm logging in (console/kdm). Basically I would like to manually do same thing as Debian installer would have done.
I'm running Squeeze.
When I installed, I selected the option to encrypt my home folder. I believe this is causing constant crashes now, since error message is user id/password related. Is there a way to remove the encryption?
View 5 Replies View RelatedI need to do a reinstall (read the details here): http://ubuntuforums.org/showthread.php?t=1703381 but I need to be able to access my home directory which is encrypted. Is there a way to decrypt my home folder, so that I don't get into trouble accessing it later on?
View 9 Replies View RelatedUsing SUSE 11, I'm trying to change my existing login user id HOME directory to use encryption. I use YAST to do this, just by clicking the ENCRYPTION box inside the USER AND GROUP MANAGER tool.I receive this error message -- "Not enough disk space left to copy existing data".Which file system do I need to add space to?Here are the filesystem existing sizes --
Filesystem: / Size: 6g Used: 3g
Filesystem: /home Size: 1.8g Used: 65m
I ran fsck on the wrong partition (which was mounted) and in my haste blew up the file system on that partition. Now here's the kicker, I had 450Gb of data and documents on that partition that was in an encrypted home directory. So the long and the short of it I ran fsck again and I was able to recover all the files, and they are now residing on a Lost+Found folder on my hard drive.I have located the encrypted files, but I don't know what to do with them.
View 1 Replies View RelatedWhen installing the latest Distro of Mint (I believe this is not much different, if at all, from Ubuntu as far as this goes) I chose to have my Home folder encrypted using the login password. This was a function of the installation. What I was wondering about was how secure this was and if I should maybe use something to do a better encryption or not.
View 1 Replies View RelatedI tried upgrading to 10.04, and now when it boots it just goes into a grub2 terminal and doesn't display a boot menu. I tried re-installing grub2 from the live cd, but that didn't do anything. I figured if I've hosed the last install I'll install from scratch, but I can't even access my files from the live cd! I did a bit of searching and everyone seems to just encrypt ~/Private, whereas I've encrypted the whole home directory. So much for security... In the live cd, it has a readme.txt and says to type "ecryptfs-mount-private" to access the files, but it just gives the error "ERROR: Encrypted private directory is not setup properly". What do I do?
View 3 Replies View Relatedmy CPU passed away, got a new system, installed a new 9.04 and blew it up to studio. have 2 new disks and my old raid 0 lvm. mounted is ( lvdisplay) , user rights fixed fine. I do have my old login name and passwd in a book. How can I open the data it was the old encrypted home directory. I have an icon "Acess your private Data" and something called link to Acess Your private data. There I can read link (broken) so the broke link is sorted out, as i do have now a directory in my home with the same name as it has been, /home/coconews/ and that is fine
View 1 Replies View RelatedUbuntu 10.04 (64)I have a second drive (currently mounted as /disk2).I want my home directory (/home/jb) to include this second disk as JUST a separate 'folder' accessible from my home area.want the data on the second disk to be encrypted, (just like my /home/jb folder is now).I would prefer to 'blend' the second drive into my existing setup.I'm looking for the safest way to achieve this, don't mind editing fstab etc. or getting my hands dirty on the cli.
View 2 Replies View RelatedI was wondering how to activate encryption on my home folder, like sugested when creating the first user? in 10.04Also, is it any good to use?It's a work computer with sometimes private documents (cv, docs, etc) and i would like to be sure no one can access it, even as root.
View 3 Replies View RelatedI installed Ubuntu Server because I want to learn Linux and I want to learn about servers. I did a newbie tutorial and then shut down. When I booted up today, the files in my home directory were replaced by Access-your-private-data.desktop and readme.txt, but I have no idea why. I followed the instructions in readme.txt and typed ecryptfs-mount-private. It told me
INFO: Your private directory has been mounted.
INFO: To see this change in your current shell:
cd /home/rmob
But if I do ls /home/rmob, it still shows me Access-your-private-data.desktop and readme.txt instead of the files I created there yesterday. Every time I reboot, it tells me
keyctl_search: Required key not available
Perhaps try the interactive 'ecryptfs-mount-private'
If I try ecryptfs-mount-private again, it still tells me it has mounted it, but still just shows me those same two files. Googling about this tells me this means the directory got encrypted somehow. I tried typing touch ~/.ecryptfs/auto-mount which I found in this tutorial, but it didn't make a difference and I can't find any other solution anywhere.
During the installation of Ubuntu Karmic, I picked the option that encrypts my home directory.
A few questions:
(1) Shortly after installation, I was asked to run a command to print a key necessary for data recovery from a rescue CD. I didn't run it at the time and am now looking for the command to run. What is it?
(2) I think I read somewhere that this also encrypts swap. Great. Correct me if that's wrong.
(3) If I suspend the machine, is my home directory encrypted? That is, if I have this on a laptop and travel with the suspended laptop and someone steals it, are my data safe, or not?
(4) I assume the weakest point in the system is my relatively short login password (but I think the install tests it and found it okay). Is there a recommendation how long this should be?
Apparently after an upgrade, I lost access to my encrypted home directory. Looks like upgrade scripts changed the scripts that mounted my encrypted home directory. As I don't have my ecryptfs password handy, is there any way to revert the things back as they were? I have liked Ubuntu all the way but after this upgrade-mess-up, I might change my view.
View 3 Replies View RelatedI had errors pop up when I tried updating my 10.10 to 11.04 so I ended up having to do it from a Live USB which installs it over everything (fine by me).Unfortunately I forgot I had an encrypted /home directory. So various messages and stuff came up when I tried to log in.nfortunately I don't remember what my encryption passphrase is offhand, so I moved it to a slightly different folder name and had to have a new directory created for my username.It's still there, but how can I try to open it trying the various versions of the passphrase I think it may be? Can I double-click it and try?Also, in the future what is the best way to handle a "fresh" install that I want to connect to my encrypted /home directory?
View 4 Replies View Relatedif it's possible to use a white or blacklist to control which folders are ecryptfs encrypted when you're using the "encrypted home folder" option.
Of course I can always create an extra folder outside of my ~ and then symlink what I don't want encrypted into it, but I'd rather that it's possible to create like, ~/.ecryptsfs/excludelist with a list of paths that shouldn't be encrypted.
I am trying to open an encrypted home directory from opensuse 11.2 with opensuse 11.3. This means i have a user.img and a user.key So far i have done:
losetup /dev/loop3 user.img
cryptsetup luksOpen /dev/loop3 home
Enter passphrase for /dev/loop3:
No key available with this passphrase. At this point it will not accept my passphrase.
A luksDump reveals:
cryptsetup luksDump /dev/loop3
LUKS header information for /dev/loop3
[code]....
When i try to use the key file, i get:
cryptsetup luksOpen /dev/loop3 home --key-file home.key No key available with this passphrase.
I am having a problem setting up an encrypted home directory with openSUSE 11.3. I used Yast User and Group Management to edit an existing user to encrypt the home directory and the user.key and user.img files were created in the /home directory. I tried it out and logged in as user and created a new file. I logged out and logged in as a different user and was able to see the newly created file in the first users home directory.
I figured I did something wrong so I went back to Yast and deleted the user. I deleted the /home/user directory using file manager su mode. I tried again to create a new user with an encrypted home directory using Yast and now when Yast tries to write the changes I get an error: "pam_mount is already setup for user. Use --replace to replace the
existing entry." I do not know how to proceed from here except to try with a different user name as I do not understand what the error message means and what command to use --replace with.
I just installed 9.10 on my laptop and selected the option for home folder encryption. I am running DropBox and placed the DropBox folder on my desktop (meaning it should be encrypted when I am logged out.) So I have two questions:
1) Shouldn't this setup cause my DropBox files on the server to be encrypted? Apparently they are not because they appear as unencrypted text using the DropBox Web interface.
2) If they were encrypted on the server (which doesn't appear to be the case right now), how would it be possible to share them with another client unless the encryption on both clients were set up identically?
While setting up my laptop on a new hard drive (a bad mobo caused writes which pretty much rendered teh old hdd unusable) I was asked if I wanted to encrypt my home partition.
I've been wanting this for several years - even going as far as trying to get a copy of CheckPoint. That's waht my organization uses on all Wintendo laptops and is required.
In any case, I said "yes" and am happily using my laptop with an encrypted home partition. I'm assuming based on this - [URL] - that it is using EncryptFS as the scheme.
if I were to misplace my laptop, how easy would it be for a forensics team to retrieve my data. Let's assume I have a fairly strong passphrase, such as BisZumBitterenEnd3. [URL]
I had some major problems after the recent Ubuntu upgrade and had to boot from a live cd. I have a separate /home partition, but it was encrypted using the default install encryption in the 9.10 install cd. How can I get to my files so I can back them up?
I have tried this but it did not work: http://ubuntuforums.org/showthread.php?t=1337693
I'm using 10.04 with encrypted home dir. I think the behavior below is wrong:
I can log in as root and change user's password. After that the user can log in using new password, which is normal, but it can also decrypt its home dir using the new password, which is dangerous. Assume I lost my computer. This encrypted home dir will not protect my private data because whoever gets the computer can boot it up with a livecd and chroot to change my user's password and then boot up my system and log in using new password.
Let's begin from the top. I have a relatively new laptop that I've been running Ubuntu on (along with a little-used Windows boot). Picked it up in November or so, installed the current "latest" version of Ubuntu at the time (9.10). I have been doing incremental upgrades, and it's been progressively breaking down more and more. Yes, this includes 10.04.
After GRUB stopped working, I decided it was time to try a reinstall from the top. I told it to leave all the other operating systems alone and do a full reinstall.
Fortunately, I had managed to stuff most of my current work in duplicate locations during this whole debacle, somehow. Don't ask me how I managed to do that when GRUB wasn't working. However, when I installed, I conscientiously said "Oh, yes, Ubuntu, encrypt my home folder! I love privacy!" As a result, about... 30 gigabytes of useful (but ultimately re-downloadable) material is rather inaccessible at the moment. When I try to boot the old system using the newly fixed GRUB, it goes into kernel panic. This seems like a no-go.
I have a saved hojillion-character long passphrase for decryption from my install back in November. Conscientiously saved in the case of just such an emergency.
I read this how-to and followed it to the letter as far as I could tell, trying to mount with ecrytfs to recover my data.
[USERNAME] here is a proxy for my actual username. Yes, the location of my old home folder may seem a little bizarre.
Code:
sudo mount -t ecryptfs /media/c82ca9fe-2b15-4aca-a98d-6482b1d80a32/home/[USERNAME]/ /home/[USERNAME]/oldhome
Passphrase:
Select cipher:
1) aes: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
[Code].....
I've just reinstalled my box with an encrypted home (used the encrypt home option when installing). I have a query in this regard - suppose I lose the box. Won't it be possible for someone to drop into root, reset my passwd and then access my /home. Is there anyway of having a different passwd for accessing /home? My ~ is on a different partition from /.
View 3 Replies View RelatedWhat are the steps I must take to move my existing home folder to a separate, encrypted partition? Can I create this partition without damaging my current partition? Where is a trusted location to download App Armor profiles? What else can I do to harden the security of Ubuntu?
View 1 Replies View Related