Re: [gentoo-user] Guidance on encrypting my /home

2006-08-19 Thread Stefan G. Weichinger
Richard Fish wrote: > On 8/19/06, Stefan G. Weichinger <[EMAIL PROTECTED]> wrote: >> Would you recommend to use the initramfs from the HOWTO, or might there >> be another way of doing it, staying closer at the genkernel-way of >> doing it? > > Well genkernel also allows you to specify a custom lin

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-19 Thread Richard Fish
On 8/19/06, Stefan G. Weichinger <[EMAIL PROTECTED]> wrote: Would you recommend to use the initramfs from the HOWTO, or might there be another way of doing it, staying closer at the genkernel-way of doing it? Well genkernel also allows you to specify a custom linuxrc (--linuxrc=). This is prob

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-19 Thread Stefan G. Weichinger
Stefan G. Weichinger wrote: > As my goal is to encrypt root and swap *and* use suspend2, I had to > go slightly different paths than the mentioned howto says. --- > Would you recommend to use the initramfs from the HOWTO, or might > there be another way of doing it, staying closer at the genkern

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-19 Thread Stefan G. Weichinger
Richard Fish wrote: >> http://gentoo-wiki.com/SECURITY_System_Encryption_DM-Crypt_with_LUKS > > This guide seems reasonable. I think the current live CD includes the > version of cryptsetup that understands LUKS though, so it shouldn't be > necessary to download that. And I prefer to randomize

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-14 Thread John J. Foster
On Sun, Aug 13, 2006 at 11:59:48PM -0700, Richard Fish wrote: > > If you want to get started on this before your new laptop arrives, I > suggest starting with the initramfs and encrypting swap only. You > should be able to create an initramfs that will setup the mapping and > do the swapon before

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-14 Thread Dirk Heinrichs
Am Montag, 14. August 2006 08:59 schrieb ext Richard Fish: > If you want to get started on this before your new laptop arrives, I > suggest starting with the initramfs and encrypting swap only. You > should be able to create an initramfs that will setup the mapping and > do the swapon before your

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-14 Thread Richard Fish
On 8/13/06, John J. Foster <[EMAIL PROTECTED]> wrote: Ok, this looks like a setup I'd be pleased with. Right now I have / /boot swap How much of a pain will it be to implement now? Or will I be better off waiting about 6 months till I get a laptop, and then following the guide at http://gentoo

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread Eray Aslan
On Sun, August 13, 2006 3:22 am, John J. Foster wrote: [snip] > So, before I get to settled on using this, a few questions. > > Do you encrypt your home directory? /home and swap > What apps and/or combination of apps do you use, and why? cryptsetupLUKS > Which ciphers do you prefer? Why? AES

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread John J. Foster
On Sat, Aug 12, 2006 at 06:32:49PM -0700, Richard Fish wrote: > On 8/12/06, John J. Foster <[EMAIL PROTECTED]> wrote: > >Do you encrypt your home directory? > > I encrypt everything except /boot. > > >What apps and/or combination of apps do you use, and why? > > dm-crypt with cryptsetup using th

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread Richard Fish
On 8/13/06, Neil Bothwick <[EMAIL PROTECTED]> wrote: On Sat, 12 Aug 2006 18:32:49 -0700, Richard Fish wrote: Is there any benefit in encrypting the likes of /usr and /opt? Unless you don't want anyone to know which software you have installed :) Not really :-P It was just easy to do since I us

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread Neil Bothwick
On Sun, 13 Aug 2006 13:42:50 -0400, Ryan Sims wrote: > This thread piqued my interest; I found this: > http://gentoo-wiki.com/SECURITY_System_Encryption_DM-Crypt_with_LUKS/loopback_devices > > Is that how you do your home dir? No, I use a full partition, not a loop device. > Where do you put th

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread Ryan Sims
On 8/13/06, Neil Bothwick <[EMAIL PROTECTED]> wrote: On Sat, 12 Aug 2006 18:32:49 -0700, Richard Fish wrote: [snip] > > What apps and/or combination of apps do you use, and why? > > dm-crypt with cryptsetup using the LUKS format. Same here, but only for /home and my backup directory. I reall

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-13 Thread Neil Bothwick
On Sat, 12 Aug 2006 18:32:49 -0700, Richard Fish wrote: > > Do you encrypt your home directory? > > I encrypt everything except /boot. Is there any benefit in encrypting the likes of /usr and /opt? Unless you don't want anyone to know which software you have installed :) > > What apps and/or co

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-12 Thread Richard Fish
On 8/12/06, John J. Foster <[EMAIL PROTECTED]> wrote: Do you encrypt your home directory? I encrypt everything except /boot. What apps and/or combination of apps do you use, and why? dm-crypt with cryptsetup using the LUKS format. Which ciphers do you prefer? Why? aes-cbc-essiv:sha256,

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-12 Thread Jerry McBride
On Saturday 12 August 2006 20:22, John J. Foster wrote: > Hi, > > I've been playing with encrypting my home directory using cfs and > following the instructions at > > http://gentoo-wiki.com/HOWTO_Encrypt_Your_Home_Directory_Using_CFS > > I guess it mostly works, although I've had cfsd die randomly

Re: [gentoo-user] Guidance on encrypting my /home

2006-08-12 Thread Ryan Tandy
John J. Foster wrote: Do you encrypt your home directory? Not on my desktop. On my laptop, however, everything except /boot is encrypted (/, /home, swap). What apps and/or combination of apps do you use, and why? sys-apps/util-linux with USE=crypt, and app-crypt/loop-aes. Which ciphers

[gentoo-user] Guidance on encrypting my /home

2006-08-12 Thread John J. Foster
Hi, I've been playing with encrypting my home directory using cfs and following the instructions at http://gentoo-wiki.com/HOWTO_Encrypt_Your_Home_Directory_Using_CFS I guess it mostly works, although I've had cfsd die randomly a few times in a couple days. It sorta bothers me that app-crypt/cfs