Ubuntu Security :: Make Ubuntu Simultaneously Unlock Multiple Encrypted Partitions At Boot
Jul 15, 2010
I installed 4 encrypted partitions (/, /var, /tmp, and swap) that are mounted at boot using the Alternate Installation Disc, and they all have the same password, but I have to type that password in 4 times when booting up. How do I make it so I only need to type in my password once?
View 1 Replies
ADVERTISEMENT
May 20, 2010
Anyone had any experience with unlocking a LUKS encrypted root partition via ssh? It is ok to leave /boot unencrypted.
There are a few pages from google with the debians variants, archived by putting dropbear into initrd.
I like to do that with my fedora/centos remote servers, but struggle to find any resources specific to it. Anyone has any suggestions and thoughts as to what might be a suitable way forward?
View 2 Replies
View Related
Nov 21, 2010
I just installed the testing version of Debian with the option to setup encrypted home directories. I used a passphrase that I now want to change to something else. How do I do that?
View 4 Replies
View Related
Oct 22, 2010
I have been working on a project for a while now that involves a rather complex daemon that has to be simultaneously running different tasks. For example one of these tasks is to receive IP packets from the Netfilter queue and place those packets into one of several internal queues. While other tasks involve taking IP packets from those internal queues and processing/manipulating them and finally returning them back to the Linux network stack.
As I as I have no previous C experience before starting this project I just spawned a new thread each time I needed the daemon to be doing something else while those other tasks continued to run. Is there any other way of doing this or is this pretty much the only way of doing this? Because C is procedural I could not figure out any other way of doing accomplishing what I wanted. Should I have done it some other way or is this the correct and only way I could have gotten my C app to be running multiple tasks at the same time?
View 6 Replies
View Related
May 29, 2011
I have installed debian 6 on two of my laptops. During installation I chose to encrypt my partitions (swap, root and home). Now I find it annoying that during boot up I'm asked for password, for each of these partions seperately. I have given same password for all three of them. How can I make the system ask for the password only once. I know it can be done because on fedora it was like that before.
View 5 Replies
View Related
Jun 10, 2010
By fiat I must distribute my homedirs across multiple physical disks/partitions. Unfortunately this is not open to discussion so obvious solutions like a lvm home partition are not available to me. The issue: Users created with homedirs on the main home partition (the one created as home during the f13 install) behave as expected, but if I create them on a different partition (home9 for the sake of this example) the users are not able to login (dropped back to login screen), nor run x-apps if su -'d to in a konsole.
If I 'su - <user-on-home9>' in a konsole, I get delivered to the /home9/<user-on-home9> as expected, but x-apps fail with the error: 'cannot open display: :0'. This can be temporarily fixed with the command 'xhost +SI:localhost:<user-on-home9>', but I would rather fix it permanently at the source.
This appears to be an selinux problem from the following.The contexts of the the two rootdirs are the same
% ls -Zd /home /home9
drwxr-xr-x. root root system_u:object_r:home_root_t:s0 /home
drwxr-xr-x. root root system_u:object_r:home_root_t:s0 /home9
but when I create the users (using useradd or the gui) their respective contexts differ:
% ls -Zd /home/user5 /home9/user6
[Code]...
So, my questions for you selinux experts are 1) is it possible to have homedirs spread across multiple partitions with selinux, and if so, how, 2) Why, even when I manually set the dir/file contexts to match a properly functioning user5 from /home, do users from /home9 still not work (as far as login and x-apps).
View 8 Replies
View Related
Feb 22, 2010
I'm trying to have a LUKS encrypted partition mounted at startup and to have GDM ask for my key so it will decrypt. Now I followed [URL] to the letter. Except for now, I have it just mounted into /mnt/cryptohome so I'm not messing with my system. My problem is the one everyone mentions in the comments, ubuntu isn't asking for the LUKS key in the X display, it's asking in the first terminal (Ctrl-Alt-F1). This will not do. I need it to ask to mount my drive before I'm even asked to login, so eventually I can encrypt my /home.
View 9 Replies
View Related
Mar 7, 2011
I installed Ubuntu 10.10 64 on my laptop with the entire 500gb setup as encrypted LVM. This has worked well for several months with no problems. During this time i have been backing up the data to an external usb drive (1tb) on a regular basis. The usb drive was not encrypted. So, I thought it would be a good idea to encrypt the backup drive too. I wiped out the backup drive and set it up as one large encrypted lvm and mbr. This seemed to work fine but immediately afterwards I decided to erase that and set it up as encrypted lvm guid instead of mbr. I couldn't delete it while logged into my desktop so i decided to do it from a bootable gparted usb stick. In gparted i erased the 1TB backup drive once again and planned on setting it up the way I wanted once I was logged back into my ubuntu desktop. Now I cant boot into my desktop with the following errors:
cryptsetup: evms_activate is not available b0d) does not begin with /dev/mapper/
Then after waiting for a few minutes I get an error followed by (initramfs)
When booting from a live version of ubuntu the 250MB boot patition is recognized and 500 partion is there but it is labeled as empty/unused.
Also, I did choose to use the exact same passphrase as what is used on the main bootable drive when I set up the encrypted partition on the external 1TB drive.
View 9 Replies
View Related
Jan 5, 2010
I've just started using ubuntu one. However, some of the files I store on there are sensitive so I encrypt them using seahorse. Right click, encrypt etc etc. My question is, is there a way to automatically get the encrypt process to delete the un-encrypted file when it makes the new encrypted copy?
View 6 Replies
View Related
Nov 11, 2010
I recently purchased a set of three professional mics and converters for them (they are XLR mics, so i bought three icicles to convert into the USB port)The computer sees all three microphones, but I can figure out how to be able to record on all three at the same time.Is this at all possible, or did I just waste a ton of money on converters?EDIT: I would like to add that these mics are identical, and I'm wondering if nothing else if it's possible to merge the two mount points so that it appears as one micEDIT AGAIN: I have also just installed Pulse Audio Volume Control, and it picks up both mics. How can i tell audacity to use this?
View 1 Replies
View Related
Sep 21, 2010
I'm trying to write a bash script that will simultaneously ping a host and execute a traceroute at the same time. I would like the results to output to a text file.
View 6 Replies
View Related
Apr 27, 2011
I have a list of approximately 50 words that I'd like to search documents for and delete those words. I was wondering if there is some type of automated process for removing multiple words rather than me manually putting each word into 'find and replace'
On that note I guess I could write the Macro in python if there isn't anything out there that does this. However I read that open office only works with python 2.3.5 or something of that nature, and I have already installed 3.1. Is that still going to be an issue?
View 2 Replies
View Related
Jan 21, 2009
I need a FREE solution that can image an entire Luks system encrypted volume and the rest of the used HDD, the MBR and /boot partition. Note: MBR and /boot are not encrypted. Note 2: I want to be able to restore entire drive from image with only a couple of steps. Note 3: Destination HDD space is a factor. Image file must be compressed and the image file must be around 40 to 50 GB or less. The smaller the image the better.
I have used clonezilla live cd before but not for encrypted volumes. I know you can install it in Linux. But, I don't know how to configure it after installation. I would be very happy if someone could tell me how to configure clonezilla in Fedora. How to guides are also welcome. I have one more question. If I image the encrypted volumes and all the stuff I mentioned above while logged in to Fedora, and I restore the drive from the image, will the recovered drive still be encrypted?
View 8 Replies
View Related
Sep 12, 2010
I started a new x session on tty8. This is display 1. The first session is tty7 display 0.
I can switch between them easily enough. CTRL ALT F7 goes to tty7. CTRL ALT F8 goes to tty8.
But if I try to run, say, the "import" command for screenshots on tty8, while switched to tty7, all it gives is a black screen.
The reason being, I think, because only one session is actually outputting at any given time. How do I make both of them output, so I can take a screenshot on 1 session, but use the other session to do other stuff?
View 2 Replies
View Related
Jul 8, 2011
Performing commands in multiple subdirectories simultaneously. I'd like to run a program I've copied into every subdirectory which takes *.in files in the current directory as input files. I can find the program, but how do I tell it to run when I've found it?
View 1 Replies
View Related
Sep 14, 2010
i'd like to execute in several subdirectories that all have the same name, but I don't want to have to change into each subdirectory (there are hundreds) to execute the script. All the subdirectories have the same name ("final_alignments"), but are located in parent directories with different names. All these parent directories are in the same "super parent" directory. I've tried to do this using "for/do" and "find" but no luck so far.
View 8 Replies
View Related
Dec 18, 2010
I installed 2 nic cards in my pentium 4 computer running rhel5 to be used as a proxy server and connect 2 computers in each network card for testing . The problem is I cannot ping or use the 2 cards simultaneously . One must be deactivated for the other to be ping . The Network configuration panel indicate both card status as active but i can only ping the first to be activated . I have already set onboot=yes to both cards but still the same result after restarting . The nic cards are onboard - Realtek RTL8139 and pci -3com 3c905b.
View 4 Replies
View Related
Oct 5, 2010
Here's the setup: One x86 server (Red Hat 4) with two serial connections to an embedded linux device. One serial connection is to a power control so the device can the restarted, and the other is used for a console to this device. Both serial connections use minicom. People on my team VNC to the x86 server, where they find the two minicom sessions waiting for them as they are left open. I would like to automate connecting to the server and communicating over the serial lines.
Supposing I use ssh to the x86 server, could minicom be used over the serial lines without terminating the minicom processes seen through VNC? If not, is there a way to re-open those windows from within the ssh session, so a user who VNCs to the server won't have to reopen them? Could a single ssh connection control two minicom terminals simultaneously, or would there need to be two ssh connections? It is assumed a user and the automated process will *not* try to access the device at the same time; the automation would trigger during off hours.
View 2 Replies
View Related
Aug 22, 2011
I am looking for software (Windows or Linux) that can do the following: Resize one image to several provided sizes. Detects the type of the picture (wide, normal) and does the resize based on that. What I mean by that is that it should not break the image by shrinking it more in one direction then in the other so it looks weird. The purpose of this is my Blog. If I want to give my readers a wallpaper, I want to give them several options for the sizes so they can have it in their own preferred screen resolution. The image must however keep its original aspect ratio.
View 2 Replies
View Related
Aug 5, 2010
i want to copy one or more files or directory from one drive to multiple drive simultaneously. It like a cloning a disk. But i dont like clone entire disk. i want to copy/clone only certine files or folder. if any one can know how to copy one source to multiple destination simultaneously.
View 3 Replies
View Related
Nov 24, 2010
I've created some encrypted partitions using Disk Utility, and would like them to be automatically mounted when Ubuntu starts up. Is there a guide to this anywhere?
I've gathered that it involves /etc/crypttab and possibly /etc/init.d/cryptdisks, but haven't had much success so far.
Ideally, some of the partitions would mount early in the boot process, while some of them can mount after I've logged in.
View 5 Replies
View Related
Jan 13, 2010
I think this counts as a security question. I didn't know where else to place this.It's really preventing me from doing some things, such as setting up the Empathy IM program for chatting and whatnot, and this default keyring really haulting any progress I can make on that front. It also pops up when I'm just booting up the laptop. My brother set the password and then forgot, so he tried all of these passwords and it would never work. It always pops back up several moments later and reiterates its question. It goes away when I click on 'Deny', but now I can't follow that same route when trying to set Empathy IM Client up. I would like to either do away with this password requirement, or just change it to something I can easily remember
View 1 Replies
View Related
Aug 5, 2010
When lauching gdmsetup I can't unlock it to change settings. nothing happens when clicking on "lock" button
the same problem in Ubuntu Software Center 2.0.7. nothing happens when I pull "Install"
(no authorization starts)
there are no authorization window in admin-shares too
It started when I have changed the type of ubuntu login - I have changed from gdmsetup settings from "password" to automatic authorization.
I checked the the PolicyKit Agent. It seems to working (and autostarting) with such command:
/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
View 2 Replies
View Related
Sep 7, 2010
So I was testing to see what would happen if I tried to open a root shell in recovery mode, WITHOUT having first activated the root-user account (I only installed the system two days ago). I used my ordinary password and was expecting to see something like "Invalid password" or some such message. To my surprise, I got a root prompt. Thinking that this may just be how it works with recovery mode, I tried logging out of my X session and logging back in as root, thinking (or at least hoping) that it wouldn't work. But it did.
View 9 Replies
View Related
Oct 11, 2010
I have a problem where I am asked to unlock the keyring every time I use Evolution.I enter my password on the user select screen and login and have evolution save my email password but whenever I open the program it asks for the same password as I use to login. For security reasons I need to have my password requested at login but don't feel I need it for evolution as I thought my email password was enough.
View 3 Replies
View Related
Mar 9, 2011
After installing ubuntu 10.10 on pc i had it running fine for roughly 2 weeks. i have selected automatic login so i do not need to mess about logging in etc, but recently my pc asks for my password to unlock keyring once it shows my desktop.
View 2 Replies
View Related
Feb 28, 2010
I just installed CentOS 5.4 (x86_64) and I encrypted my /home /var /tmp and /mnt/Storage partitions, along with my swap partition. My only complaint is that when I boot, I have to enter my password 4 times, and I did not pick a short password. The password is the same for all 4 partitions. Is there anyway I can set things up so I can just type my password once? Once I get everything set up, I won't be booting that often, but right now it is a PIA.
View 2 Replies
View Related
Jun 9, 2011
Is it possible to output one playback stream to multiple devices simultaneously with the current PulseAudio / Phonon setup? The PulseAudio mixer only has radio buttons to choose one device per playback stream. I believe the hardware is capable of this, since I remember doing that before we had PulseAudio. How can I duplicate an audio stream?
Here's one application scenario: I am travelling with my family, all crammed in small hotel room. My wife and me want to watch a movie on my laptop without waking up our kids. I just happen to have one analogue headphone available and one wireless USB headset with me. (Of course, the low tech solution is to bring an 3,5mm Y-cable to attach two analogue headsets, but I would really love to use the USB headset together with the analogue one.)
Another similar thing that bugs me is that my laptop's built-in speakers now always seem dead when an analogue headphone is plugged in. This is mostly what one wants, and before PulseAudio, one had to manually switch them off which was generally annoying. However, the downside is for example with notifications.
For example, before PulseAudio, I could configure Skype to always ring over the laptop's built-in speakers, regardless of whether the analogue headphones were plugged in. This is no longer possible, since PulseAudio does not distinguish between built-in speakers and built-in analogue port any more, while old Alsa did. So in my office, where some analogue headphones are plugged into the docking station, I never hear Skype ringing if I don't wear the headphones.
View 9 Replies
View Related
Aug 18, 2010
I ran a test where I login a test user several times using the wrong password to see that he gets locked out after several attempts. Now that I got the test user locked out, how do I unlock the test user? I tried passwd -u <test user>, but it says passwd: Error (password not set?).
View 4 Replies
View Related
Oct 12, 2009
Does grub2 support booting off of encrypted partitions? I'd like to have an encrypted linux system, but only have space for one partition or logical group in my mbr. Or can I include that one /boot partition in the lvm group.
View 8 Replies
View Related