Re: uswsusp - security hole fixed?

2016-10-15 Thread deloptes
Teemu Likonen wrote: > I think the usual and better way is to have an unencrypted /boot and a > single other LUKS partition which contains LVM logical volumes for > everything else (swap, / and whatever). So swap is encrypted too. I have > had this setup for ages on desktop and laptop and it has

Re: uswsusp - security hole fixed?

2016-10-15 Thread Teemu Likonen
Hans [2016-10-15 13:44:41+02] wrote: > as I am a little security aimed, my /usr, /var and /home (each on a > separate partition) are enrypted with luks. > I would be happy, when someone could make some things for me a little > bit clearer, I think the usual and better way is to have an

uswsusp - security hole fixed?

2016-10-15 Thread Hans
Hello list, as I am a little security aimed, my /usr, /var and /home (each on a separate partition) are enrypted with luks. Some time ago, I discovered, that when I suspend my system (suspend-to-disk), and resume it again, I did not need to enter the password for /usr. Well, my computer