Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-13 Thread Stephen Gallagher
On Mon, 2011-12-12 at 20:13 -0800, Peter Gordon wrote:
 On Mon, 2011-12-12 at 19:10 -0800, Linda McLeod wrote:
  Is there a super secure way to lock Home File with an encrypted
  password..?
  
  Is there anything in Linux that locks a file behind a tier or key of
  passwords..?
 
 One thing that comes to mind is to keep the entire /home directory on a
 LUKS-encrypted partition or similar. (In fact, the past few Fedora
 releases have made this relatively simple: just enable the Encrypt
 option for that partition in the installation screen.)

This works if you have a single-user system, but it's not great if you
have a shared machine. I think he's asking for a file vault of some sort
where you can maintain your own home directory as encrypted separate
from the whole filesystem.

I'm not currently aware of any such mechanism in Fedora, but I'd be
interested to find out if I'm wrong.


signature.asc
Description: This is a digitally signed message part
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-13 Thread Genes MailLists
On 12/13/2011 07:59 AM, Stephen Gallagher wrote:

 This works if you have a single-user system, but it's not great if you
 have a shared machine. I think he's asking for a file vault of some sort
 where you can maintain your own home directory as encrypted separate
 from the whole filesystem.
 
 I'm not currently aware of any such mechanism in Fedora, but I'd be
 interested to find out if I'm wrong.
 
 
 

  FYI - fuse encfs will do this - but, like all things fuse, its
horribly slow in my view ... I have used it for keeping a single
directory within /home/user/private

  I much prefer luks tho ... as you say different purpose.

  gene
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-13 Thread Joe Zeff

On 12/13/2011 04:59 AM, Stephen Gallagher wrote:

This works if you have a single-user system, but it's not great if you
have a shared machine. I think he's asking for a file vault of some sort
where you can maintain your own home directory as encrypted separate
from the whole filesystem.


I suppose that you could create an encrypted partition and mount it at 
/home/$USER, so that that user's files are encrypted but not anybody else's.

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-13 Thread Cameron Simpson
On 13Dec2011 09:51, Joe Zeff j...@zeff.us wrote:
| On 12/13/2011 04:59 AM, Stephen Gallagher wrote:
| This works if you have a single-user system, but it's not great if you
| have a shared machine. I think he's asking for a file vault of some sort
| where you can maintain your own home directory as encrypted separate
| from the whole filesystem.
| 
| I suppose that you could create an encrypted partition and mount it
| at /home/$USER, so that that user's files are encrypted but not
| anybody else's.

That would be the way, but it creates something of a partitioning
problem, both in that it doesn't scale and that if your system is
already partitioned you can't do it at that point.

But using the same general idea one could make a sparse filesystem image:
make a nice big sparse file, attach it as an encrypted partition (I'm
imagining LVM and/or dm is the right tool), mkfs, mount.

Someone who knows the commands to make an encrypte filesystem and to use
LVM or the device mapper stuff to map a file to a mountable device
should be able to fill in the gaps.

That should get you I/O behavour much more efficient that FUSE based
methods.

Cheers,
-- 
Cameron Simpson c...@zip.com.au DoD#743
http://www.cskk.ezoshosting.com/cs/

To be or not to be?Not to be.
- John Slater (Arnold Schwartzenegger),
  _Macbeth_ (_The_Last_Action_Hero_)
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-13 Thread Steven Stern
On 12/12/2011 09:10 PM, Linda McLeod wrote:
 
 Is there a super secure way to lock Home File with an encrypted
 password..?
 
 Is there anything in Linux that locks a file behind a tier or key of
 passwords..?
 

This looks like it will do what you want:

http://www.rootninja.com/how-to-use-ecryptfs-on-fedora/

-- 
-- Steve
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Is there a Linux file-safe for Fedora's home file..?

2011-12-12 Thread Linda McLeod

Is there a super secure way to lock Home File with an encrypted
password..?

Is there anything in Linux that locks a file behind a tier or key of
passwords..?

-- 
http://www.fastmail.fm - The way an email service should be

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-12 Thread Patrick O'Callaghan
On Mon, 2011-12-12 at 19:10 -0800, Linda McLeod wrote:
 Is there a super secure way to lock Home File with an encrypted
 password..?

What do you mean by Home File? That's not a term of art in Linux. Do you
mean Home Directory?

 Is there anything in Linux that locks a file behind a tier or key of
 passwords..?

You can use an encrypted home directory.

poc

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Is there a Linux file-safe for Fedora's home file..?

2011-12-12 Thread Peter Gordon
On Mon, 2011-12-12 at 19:10 -0800, Linda McLeod wrote:
 Is there a super secure way to lock Home File with an encrypted
 password..?
 
 Is there anything in Linux that locks a file behind a tier or key of
 passwords..?

One thing that comes to mind is to keep the entire /home directory on a
LUKS-encrypted partition or similar. (In fact, the past few Fedora
releases have made this relatively simple: just enable the Encrypt
option for that partition in the installation screen.)
-- 
Peter Gordon (codergeek42) pe...@thecodergeek.com
Who am I? :: http://thecodergeek.com/about-me



signature.asc
Description: This is a digitally signed message part
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org