Ubuntu Security :: Encrypting My Server ?
Oct 29, 2010
I have an Ubuntu 10.04.1 LTS server that I set up a while back and I am considering encrypting the whole box. I store everything on the server and if it were stolen from a home robbery it could be quite devastating. The server is using two 750 GB SATA hard drives formatted with LVM. Inside the LVM I have a small partition on the first drive for the OS, SWAP, and everything else on the first and second drive is /var/media which is where I store all the data. I have set up an encrypted LVM on my laptop but that was during the install using the automatic method.
I can't figure out how to do what I want to do and I don't want to risk destroying the data on the server. What I would like is to non-destructively encrypt the server (System, SWAP, and DATA partitions) similar to how TrueCrypt works on Windows and I'd like the encryption key to be stored on a USB thumb drive so when the server boots it requires a hardware key. (And have the encryption key backed up online in case the flash drive dies.) And I'd like to use AES 256.
Code:
View 1 Replies
ADVERTISEMENT
Jun 10, 2010
why the following doesn't work with ext3 or 4?
dd if=/dev/urandom of=/tmp/container.bin bs=1024 count=20000
sudo losetup /dev/loop2 /tmp/container.bin
sudo cryptsetup -c aes -s 256 --verify-passphrase luksFormat /dev/loop2[code].........
View 1 Replies
View Related
Jun 24, 2010
We use a squid proxy server for all http traffic. Is there any way to configure squid so that all traffic which squid and workstation communicates is SSL and encrypted ?
View 2 Replies
View Related
Mar 6, 2010
I currently have my home folder encrypted with 128 bit encfs but i have the back up of that 'in the clear' on my back up hard drive. I am not that great with complicated instructions and especially the terminal so what if any is the easiest program to encrypt with?
View 9 Replies
View Related
Jun 1, 2010
What is the easiest way to encrypt plain text content with a password only? I need to encrypt client login information, but I hate dealing with all the unnecessary complexities of Linux's encryption systems.
I know I am going to get a bunch of people telling me how perfect Seahorse and whatever is, but Seahorse and the default /home directly encryption have both given me too many problems when decrypting my information. I prefer to preserve my data rather than using these methods.
View 9 Replies
View Related
Jun 12, 2011
I have Kubuntu 11.04 64-bit installed (software upgrade from 10.10) and I have a separate /home partition. I want to encrypt my /home partition (and perhaps the swap partition as well) but I don't want to have to reinstall Kubuntu. (Mostly because it was a software upgrade and I don't have an 11.04 disc.) I found a tutorial for Encryptfs via one of the stickies that mentions post-install migration, but it says that using Encryptfs on a separate /home partition is more complicated than if it were part of the root partition and that the CDs don't have any software to preserve and configure existing encrypted /home partitions. (Granted this tutorial is made for 9.04, so things may have changed.)
Also, this tutorial makes it sound like if you have your /home directory encrypted that the encrypted data is stored in a folder on the root partition. Is it done the same way if the /home directory is on its own partition? Because I don't think my root partition is large enough to have all of my /home data. (I purposely kept it small because the root partition doesn't seem to get very large.)
View 9 Replies
View Related
Jun 17, 2009
i have recently installed thunderbird on my fedora 11 box and so far so good. i am interested in encrypting my emails and digitally signing them as well. does anyone have documentation as to how i can do this? i messed around with it last night but i was not able to import a valid certificate.
View 14 Replies
View Related
Dec 12, 2009
I'm installing fedora 12 on a laptop using the live cd, and I have a few questions about the encryption process.
First, I'd like to fill the drive with random data. I've read the fedora documentation and it suggests using the following command: dd if=/dev/urandom of=<device>. The installer didn't offer an opportunity to do this, so I opened a terminal and typed the command. I expected it to take hours on my 160 gig hard drive, but it only took about 3 minutes, and indicated about 600 megs of data had been written. Did I do it correctly? According to palimpsest, my boot partition is sda1 and the other partition is sda2, so that's the one ran the command with.
Second, I need some advice on what to encrypt. The installer shows me the following layout after I select encryption:
LVM Volume Groups
Hard Drives
I know I can't encrypt boot, but I can encrypt lv_root and lv_swap. But is it necessary to do that? And tell me the pros and cons of using a boot loader password?
View 1 Replies
View Related
Oct 21, 2010
I encrypted my hard drive on my media PC but it's really annoying having to type in a password every time I turn it on. I chose a short password so it was quick and easy to type in but is it worth encrypting data with a weak password?If the computer is suspended, someone could come along and resume the computer. They would be presented with a locked GNOME session) but the data would be unencrypted; does this go against encrypting the hard drive? Or does the locked GNOME session provide enough security to keep an intruder out?
View 9 Replies
View Related
Aug 10, 2011
I would like to encrypt my swap partition ...During installation, I tried to select the "encrypt partition" choice, but it needed a passphrase.After installation, I tried to encrypt my partition ... I followed this article: The problem is that my swap partition always changes its path ...When I first booted the system, it was /dev/sda10, next it became /dev/sdc10, now it is /dev/sdb10. This is probably the reason why in fstab all entries are according to UUID.However, the swap partition is not fond of UUIDs ! I tried to mkswap /dev/<current swap partition> -L Swap, I received a UUID, puted it in /etc/crypttab ... it worked for the first time ... but the second time... did not.
View 14 Replies
View Related
Jan 7, 2010
As part of making a encrypted private folder i told encfs to encrypt swap space on my pc knowing that this would probably break sleep and hibernation. That said i just turned on ubuntu for 5 mins, had to go away for a bit, when i came back to unlock the screen my password was not being accepted, and another 5 mins later the screen said that my session had timed out-i had to do a cold reboot Does this mean i cant lock the screen anymore?
View 7 Replies
View Related
Mar 9, 2011
Has anyone tried encrypting the boot partition to prevent the kernel from being modified. Iv tried following this but I'm running into issues when building. [URL] Im using the source from bzr checkout [URL] Last time I tried I screwed grub and it wouldnt boot.
View 9 Replies
View Related
Dec 19, 2010
In my opinion there should be a tool installed in Ubuntu by default which lets the user easily encrypt his home folder. One is given the option in the installed, but if one decides to encrypt his folders afterwards that's quite hard to achieve.
View 8 Replies
View Related
Aug 10, 2011
Using THIS I was able to get virtual users working via standard ftp. After wrestling with selinux and such I'm able to log in as a user defined in the virtual-users file.
At the bottom is the vsftpd.conf. I can start the server no problem. I've been making edits to it so I'm not sure what's right/wrong at this point in it. I have a snapshot I keep reverting to where ftp works with virtual users and then I start monkeying with it again.
First problem I have is I'm not exactly sure how to test it. If I use WinSCP, I try SFTP and in the vsftpd.log I see:
Quote:Wed Aug 10 12:47:50 2011 [pid 3667] CONNECT: Client "192.168.xxx.xxx"
Wed Aug 10 12:47:50 2011 [pid 3667] FTP response: Client "192.168.xxx.xxx", "220 (vsFTPd 2.0.5)"
[Code].....
View 1 Replies
View Related
Feb 6, 2010
We are trying to define an appliance based on Suse for an application server and Web server Apache, so we would like to know configuration best practices for network and security, is there any paper/doc about best practices?
View 3 Replies
View Related
Jun 13, 2010
I'm looking to create an encrypted container file on a samba share, and then mount this locally. I have the following snippet working but only for fat32, and I cannot work out how to get ext3/4 going -
If I format the container as ext3 I can mount it, but never as read write.
View 3 Replies
View Related
May 8, 2011
I'm concerned about security of having a LAMP server on my laptop as having any server makes the system less secure. However, if I were to create a new partition and install a lamp server on that and only use it when offline, would the security of my main partition be affected at all?
View 3 Replies
View Related
Jul 22, 2011
I've recently been running a game server from my desktop, as well as a web page to accompany it.I use the ports 80/8123(HTTP)/5900(VNC)/50500(GAME)/5839(ADMINISTRATION).What's the best solution to protect my server from security threats? On a side note, I plan on adding a MySQL server later, but I want to keep it local only.
View 9 Replies
View Related
Aug 14, 2010
I'm new to server admin, so my question is based on what may be a bad assumption. With a server, my assumption is "if it ain't broke, don't fix it". In other words, I'm not really interested in upgrading the software to the latest and greatest if I already have stuff working on the server.
However, the one place where I DO want to constantly have upgrades is for security patches. How do I apply security updates to Ubuntu Server... and ONLY security updates?
View 2 Replies
View Related
Mar 27, 2011
When I use the -p switch for the package p7zip-full (program 7z), it only password protects the extraction process but it still shows the list of files when you try to view the contents of the archive whereas the graphical compression utility has a feature to not show the list as well. I read the man page and can't find the feature for the CLI equivalent. how to do this using the CLI?
View 1 Replies
View Related
Jun 21, 2010
From previous post I have a netbook from work that I have Debian Squeeze running on and did a full disk encryption (minus the minimal boot loader in /boot) in case it gets stolen. However, with a laptop/netbook it has a battery and I believe the encryption protocol (LUKS - correct me if I'm wrong) uses RAM to store the decrypt key. So if someone is quick they can dump RAM and analyze it until they get the key. Or even if the key is not stored there they could dump RAM which would have recent files cached unecrypted.
Is there an easy process of encrypting RAM while still using as RAM? What I mean by that is I know you could make a ramdisk sort of like how Live CDs do and encrypt that, but at best (that I know of) I can only mount it as swap space.
View 14 Replies
View Related
Nov 10, 2010
I did a fresh Maverick install with custom partition layout and didn't select "encrypt home parition" as my home partition was being saved from previous installation.Now, is there a guide I could follow to encrypt my home partition the same way Maverick would do? I just want to avoid screwing my system in the next upgrade if encrypting methods differ.
View 2 Replies
View Related
Jun 20, 2011
I saw this[URL]If your home folder is encrypted, will this work?I am just trying to prevent something like that from happening.
View 1 Replies
View Related
Jan 6, 2011
I have a problem with the evolution mail client. I have created a privat PGP key. Now I'd like to attach my puplic key to a E-Mail in order xchange the puplic keys with friends.I'm not able to find a option like "attach my privat key".I also wasn't able to find a solution by searching the web
View 1 Replies
View Related
Jan 1, 2010
Currently I'm using Ubuntu 9.04 and when I installed it I got a question if I want to encrypt disk contents. I answered no. Now I think it is good idea to have such possibility. So is it possible to have the same encryption on running system ?
View 14 Replies
View Related
Nov 25, 2010
Kernel 2.6.21.5, Slackware 12.0
Firefox 2.0.0.20
When sending an LQ post, my browser says "You're about to send information that's not encrypted". OK. I tell him not to show the warning again. But what if I want to encrypt? How do I do it?
View 1 Replies
View Related
Dec 2, 2009
I've changed my distro from Kubuntu to Opensuse with Kde and I really like the new one.
Kde look better on opensuse as well as firefox seems to run faster. But I miss a feature I had on Kubuntu that is the encryption of my home folder (And it is essential as I want to install Opensuse on my notebook).
I would like to know if it is possible and, if it is, how to encrypt my system in order to keep all my personal data and stored passwords safe in case of someone have access to my notebook.
I liked opensuse a lot but this is the only thing that is keeping me from a complete distro change.
View 1 Replies
View Related
Jan 8, 2011
How would I go about encrypting my lvm2 logical volumes on Debian Squeeze? Is it possible without backing everything up to a different drive and restoring afterwards?
View 3 Replies
View Related
Sep 16, 2010
Is it possible to encrypt the Entire root file system using LUKS.I am currently using Ubuntu 10.4 LUCID.After several hours of Google ,most of the articles were focusing to "Encrypting a drive/removable media ".. My aim is to encrypt whole File system which is currently using.
My Concerns, How to Encrypt a running file system? Will it lead to data loss?
View 1 Replies
View Related
Mar 10, 2011
I downloaded shc-3.8.7.tgz and tried to install it. but i am getting error that is
make: *** [install] Error 1
I am giving the steps i followed to install shc
1. tar -xzvf shc-3.8.7.tgz
2. cd cd shc-3.8.7
3. make
4. make install
i got the following error.
*** Installing shc and shc.1 on /usr/local
*** �Do you want to continue?
make: *** [install] Error 1
View 9 Replies
View Related
