Ubuntu Security :: Mount A Truecrypt Partition Automatically With Login Password?
May 17, 2010
I found a way some times ago to mount a truecrypt volume when opening the session by insertion of the login password in the mounting script instead of putting it in clear in the script. I don't remember to command to read/transfer the password.
I use truecrypt to encrypt a file containing my sensitive data (credit card numbers, bank account info, etc).
When I mount my encrypted file through truecrypt, I enter the password for my file. That's OK - I want to keep it that way. But when it gets mounted as a file system, ubuntu also requires that I enter the 'su' password.
I have a 2nd hard drive that I have encrypted using true crypt. Is it possible to set this up with key files (or some other way) to auto mount when linux boots. I need it in true crypt because there are some work programs I dual boot to use in windows, and need to have access to the drive in XP from time to time, and true crypt can mount there as well. But 90+% of my time is in linux and I would like to have it auto mount through fstab (or whatever way it needs to be). My entire linux setup has been set up with encryption through dm crypt and LUKS (except for /boot). So I would think having a key file stored on the computer and an auto mount fstab would be just as secure as however secure my LUKS setup is. So any way to auto mount a true crypt 2nd drive volume?
I have two questions regarding auto mount function of Truecrypt. First question:
I want to automatically mount my flash drive encrypted by Truecrypt using a keyfile whenever I plug the drive. How can I do this? I use Ubuntu 10.10.
Second question:
As I do not know the answer of my first question, I currently use following command in a startup script to mount my encrypted flash drive automatically at every system start-up.
My problem with this method is, Truecrypt always search for the drive in the same path saved in favorite drives list, e.g. /dev/sdb1. However sometimes there are more than one flash drive plugged to my computer and my encrypted drive's path changes. In such cases Truecrypt cannot mount my encrypted drive because it cannot find the drive in its path.
As a workaround I tried "auto-mount=devices" parameter. It is slow because it checks every mounted drive, and some of them external hard disk big in size. Moreover it does not recognize any mount point parameter. I'd like to mount the drive to the same mount point every time.
I have an Ubuntu 10.04 machine at home and apache setup on it (files are located in a Truecrypt volume). The reason for the web server being that I wanted to access my files wherever I'm at (i.e. hotel, work, hotspots, etc...). So far, it's worked out great for me seeing as a I can http download my files (or stream media files). However, I am often on a public hotspot and I know it's a matter of time before someone finds the webserver on my computer. I have the machine firewalled and password protected (via .htaccess), but either way I don't want people looking in on my computer.
The problem: I have used Truecrypt for a long time and completely trust using the program to encrypt/unencrypt a volume container to store my files. Usually, I would remote desktop into my computer and mount/unmount the volume when I needed it. However, after time it get's really annoying to do this. So I eventually figured out how to setup a bash script to automatically do this for me (which I put on the usb part of my phone). What I wanted to do was to be able send the bash script to my Ubuntu machine (via ftp from my phone) and have Ubuntu automatically run the script. Is this possible? What programs do I need on Ubuntu?
I was thinking about using something like cron, but that is for scheduled times. I don't really have a set time in which I need my files, it's pretty sporadic depending on how much I travel. Thus the need for being able to remotely mount the volume when I need it.
Summary: I need a way for Ubuntu to read a folder every minute or so to check for bash scripts to run. I want to be able to send the bash script via ftp from my phone, have Ubuntu run the script, then delete itself (so as to not store the password). I already know the script in which to mount the Truecrypt volume and how to send the file via ftp from my phone. It's really a matter of what program to use in Ubuntu to find and run the script.
everytime i try to vnc to my box, it pops up the keyring authentication, which is obviously a huge problem when logging in remotely.how do i change my keyring password to match my login password?
I'm seeing really bad user login format under a standard installation and am wondering why ubuntu does this as default. I have noticed that the graphical login for gnome sizes itself to accommodate a user's exact password length. This indicates to me that somewhere on the unencrypted part of a standard installation with user encryption contains at least some indication of the content of the password length which seems a security flaw even if not a complete hole, it majorly reduces the number of attempts a cracker would have to cycle through.
And that's assuming that *only* the length is contained. Furthermore it seems that it would be MUCH better to simply display the number of characters entered into the pw field and allowing the gui to expand itself from an fixed size as the field is filled out so the the user still receives visual feedback for entering characters. Either a simple character count display should be entered into the field or a 10 dot to new line so that one can visually quickly count the number enter by multiplying from a 10base graphical observation.
i'm trying to get everything working ok. i have installed ubuntu using wubi and i've found that i can access my files on my windows partition from ubuntu. to do this i have to mount the disk and enter the password each time i boot up, and i would like this to be done automatically. i was wondering if this was possible? i put in a link directly to the music folder on windows into my 'places' but it only appears once i have put the password in. its not a huge thing, but its one of those things which would make starting up my ubuntu a lot more conveniant.
recently i was trying to mount my partition automatically at start up ...so i gone through some tutorials on the net nd made some changes in /etc/fstab file (i made a back up before making any changes). when i was changing permissions of folder in which i tried to mount my all partitions i got my system screwed up.then it was showing following error at start up and GUI was not turning up. "could not update ICEauthority file " also my sudo was not working so first i restored original fstab file through recovery console then i googled out about above errors. I found some solution now my system is working but showing strange behaviour like:
> ubuntu is not detecting any of my hdd partition
> disk utility is not working (showing no error)
>fdisk -l shows nothing
> no new software is getting installed via ubuntu software center (shows no error when clicking on install but nothing turns up)
>i cannot restart or shutdown my system from GNOME it only logs off my session (although through terminal its working)
>no media player showing sound controls enabled
>gnome not showing ethernet or sound volume icon in upper panel (although net is working)
>users and groups from system->administration menu is not working (error:cannot load configuration)
i think most of the administrative tasks are not working.........i googled out but found nothing satisfactory..i dont want to reinstall it, coz i m not very experienced with linux n it took about a whole month to customize my ubuntu 9.10 on my college internet...
I had to re-install Windows XP because the install was running slow.So, I created another partition using GParted for my personal data and moved my files there and re-installed Windows XP.Now, the Windows partition won't mount automatically.NTFS Configuration Tool shows 0.0GB. So, I have to open up a Terminal window, and issue sudo mount /dev/sda1 /media/Windows and everything is fine.
i need to connect to a remote linux server on certain times (automated), but i need to log on to the server. So i want to make a script (shell perhaps) that periodically connects to the server and checks some files and folders.How do i automate it and how can i log on automatically to the remote server without typing everytime the password and login (the script should do it himself)
How to mount vfat partition automatically after boot? After login it it will mount all vfat partition and the icon of those parition will be at desktop. How can it be done. udisks is installed. If i click a vfat partition from pcmanfm it prompts for password to mount.I don't want to click. It will be automatically mounted and i will get the icon of that mounted vfat partition at desktop
I'm trying to configure pam_mount to automatically mount an encrypted partition (luks) and formatted to NTFS. I typed the command in the configuration file:
I have been using truecrypt to mount a partition on my computer for a few months now. Yesterday I tried to access it and it failed, with the following error:" mount: you must specify the filesystem type "
When creating the partition, the filesystem type was set to ext2. Apart from yesterday, I have not accessed this partition for a number of days now, and have done nothing to the operating in system in the ways of changing settings and such for a good week.
I'm a newbie despite using Ubuntu most of the time for nearly 3 years. There are some files which are created automatically in one of my ntfs partition. The files are khq, khp, kht, an autorun inf file and others. They seem to have been created while I was using ubuntu and even though I delete them,they appear again later. I have googled and have found few information that the files are malware. I will like to know if there is a known issue and solution. This is the first time i'm posting a thread.I hope i have post it at the right place and if not,
I am having a dual boot system vista/ubuntu 9.04. Till recently whenever I wanted to access my vista partition I had to type in the administrative password. However, strangely, for last few days whenever I access the vista partition I don't need to type the password. The partition is just mounted and I can access the files. I would like to know the reasons and if possible to get back the previous situation (needing password to access the vista partition).
i have a triple boot of windows XP,7 and ubuntu10.10 netbook remixis it possible to require a password to mount the windows drivesthere is no log on password on the ubuntu but i dont want people to access the other drives unless they have my password
It appears that Lucid has done away with the gksu prompt that used to greet you when you try to mount a partition. Is there any known way of restoring this? I have a number of partitions which I would rather have protected by a password (even though I know that booting a live cd will give anyone access to any mountable partition, no questions asked). I've had a quick look in gconf and found nothing that looks like it would control this behaviour, but it's quite likely that I overlooked something.
I installed linux system into a USB stick, but it never asks me to enter login password (i am the default user "root") when booting. I checked the settings in "User and Group" panel, and found everything there is OK. What additional settings should I make to this problem?
Second off, I'm trying to capture a user password on login (through gdm) such that I can re-use it for a service like Kerberos or AFS. The idea is that the user has to log in only once, and then I renew the tickets and tokens until they log out again. If there's a better way to do this
I'm trying to login to a server using gssapi-with-mic authentication against one of my school's machines that supports this mode of authentication. I have these kerberos packages installed:
batrick@menzoberranzan:~$ dpkg -l | grep krb ii krb5-config 2.2 Configuration files for Kerberos Version 5
I have a dual boot machine and recently did a fresh install of 10.4. It no longer asks for a password to access the Windows partition and I full access to it. This seems insecure to me and was wondering if someone else came across this. I thought I saw this topic discussed before but I can not seem to find it now. Is this a bug or a new unpleasant feature?I don't think it makes a difference but I do have a separate encrypted home partition on this fresh install. I have also done two fresh installs. (Well three...once testing out KDE but didn't try the Win partition. )
I just installed Fedora 10 on my laptop 2 days ago. I dont seem to remember the password i userd for my username. Is there a way to reset or change the password? I cannot login to the system.
Found a major security hole in one of my more crucial linux servers today. (Only locally) I can use the user name "root" and any string for the password. So I can literally type "poop" as the password and the server lets me in. I know how to set root password settings for SSH and sudo, but where are settings located for local access that would allow something like this?
Being in a text console (VT, that is, the screen with 25 x80 chars), say tty1, and just after booting linux, I logged in as usual,typing my password.What happened then astonished me. In Slackware distros, a small quotation from some book is written on screen just after typing the correct password. Well, after typing my password, I could see it split into two halves instead of the quotation.