Am 02.01.2012 11:49, schrieb Florian Philipp: > Am 02.01.2012 09:07, schrieb Stéphane Guedon: >> Hi all >> >> I may ask something already discussed, but I can't find any good >> documentation. >> I am wondering of how to secure my home repository on my laptop. I am >> thinking >> of cryptography and other things (the password uncrypt the repository and >> allows to read files...). >> >> What tool to use for ? Anybody knows a good doc (in french would be really >> good) ? >> >> I am not really paranoïd, but I work now in a quite important environnement >> and want any data I get out to be secured... > > I recommend dm-crypt (a.k.a. cryptsetup-luks). It encrypts the block > device under the actual file system. Gentoo wiki has some tutorials on > it (although you don't need much of it): [1] [2] > > If you only want to encrypt your home partition, you only need to follow > these steps: > > 1. Create an encrypted partition (see `man cryptsetup`) > 2. Move /home/* over to it (don't forget backup) > 3. Configure /etc/conf.d/dmcrypt > 4. Add /etc/init.d/dmcrypt to boot runlevel 5. Add it to /etc/fstab (the 'target=' line in /etc/conf.d/dmcrypt specifies the name). > [...]
I recommend testing it with some easily recoverable file system like /var/tmp or /usr/src/portage.
signature.asc
Description: OpenPGP digital signature
