adduser --encrypt-home uses eCryptfs, which is NOT the same as encfs.
encfs is a fuse-based, userspace encrypted filesystem. eCryptfs is an
encrypted filesystem inside of the linux kernel.
I've just confirmed that 'sudo adduser --encrypt-home foobar' does work
as advertised:
kirkland@x220:~$ sudo adduser --encrypt-home foobar
[sudo] password for kirkland:
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Setting up encryption ...
************************************************************************
YOU SHOULD RECORD YOUR MOUNT PASSPHRASE AND STORE IT IN A SAFE LOCATION.
ecryptfs-unwrap-passphrase ~/.ecryptfs/wrapped-passphrase
THIS WILL BE REQUIRED IF YOU NEED TO RECOVER YOUR DATA AT A LATER TIME.
************************************************************************
Done configuring.
Copying files from `/etc/skel' ...
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
Changing the user information for foobar
Enter the new value, or press ENTER for the default
Full Name []:
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [Y/n]
kirkland@x220:~$
kirkland@x220:~$ su - foobar
Password:
foobar@x220:~$ mount | grep foobar
/home/foobar/.Private on /home/foobar type ecryptfs
(ecryptfs_check_dev_ruid,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs,ecryptfs_sig=25cbd88d6ce1a31d,ecryptfs_fnek_sig=91f652eb02bb30f4)
foobar@x220:~$ ls -alF $HOME
total 64
drwx------ 2 foobar foobar 4096 2011-12-27 10:31 ./
drwxr-xr-x 7 root root 4096 2011-12-27 10:31 ../
-rw-r--r-- 1 foobar foobar 220 2011-12-27 10:31 .bash_logout
-rw-r--r-- 1 foobar foobar 3353 2011-12-27 10:31 .bashrc
lrwxrwxrwx 1 foobar foobar 32 2011-12-27 10:31 .ecryptfs ->
/home/.ecryptfs/foobar/.ecryptfs/
-rw-r--r-- 1 foobar foobar 179 2011-12-27 10:31 examples.desktop
lrwxrwxrwx 1 foobar foobar 31 2011-12-27 10:31 .Private ->
/home/.ecryptfs/foobar/.Private/
-rw-r--r-- 1 foobar foobar 675 2011-12-27 10:31 .profile
foobar@x220:~$ exit
logout
kirkland@x220:~$ sudo ls -alF /home/foobar/
total 8
dr-x------ 2 foobar foobar 4096 2011-12-27 10:31 ./
drwxr-xr-x 7 root root 4096 2011-12-27 10:31 ../
lrwxrwxrwx 1 foobar foobar 56 2011-12-27 10:31
Access-Your-Private-Data.desktop ->
/usr/share/ecryptfs-utils/ecryptfs-mount-private.desktop*
lrwxrwxrwx 1 foobar foobar 32 2011-12-27 10:31 .ecryptfs ->
/home/.ecryptfs/foobar/.ecryptfs/
lrwxrwxrwx 1 foobar foobar 31 2011-12-27 10:31 .Private ->
/home/.ecryptfs/foobar/.Private/
lrwxrwxrwx 1 foobar foobar 52 2011-12-27 10:31 README.txt ->
/usr/share/ecryptfs-utils/ecryptfs-mount-private.txt
kirkland@x220:~$ sudo ls -alF /home/.ecryptfs/foobar/.Private/
total 76
drwx------ 2 foobar foobar 4096 2011-12-27 10:32 ./
drwxr-xr-x 4 foobar foobar 4096 2011-12-27 10:31 ../
-rw-r--r-- 1 foobar foobar 12288 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mD0t9gagQzdG-H21NwbzZw---
lrwxrwxrwx 1 foobar foobar 104 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mDRBoDssX1VAA-ABNFsZl4E--
->
ECRYPTFS_FNEK_ENCRYPTED.FXaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4m3BhYv09oUN1R2iKWLdKiMpiyl7dzaAuC.eRyd6J4PSE-
-rw------- 1 foobar foobar 12288 2011-12-27 10:32
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mekJZ8x1KRzGbNqLt7eAKzk--
-rw-r--r-- 1 foobar foobar 12288 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mPHLMQVzEyg2Akx2JNYapek--
lrwxrwxrwx 1 foobar foobar 124 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mSzKt8u94oDxwdPVlvX1juk--
->
ECRYPTFS_FNEK_ENCRYPTED.FYaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4m.8dW9vbe8KkmXQs8vStDJ18YW02PHLhKbFe8fM1KQcIMhuFCDK3VuZZCvJIFBuHn
-rw-r--r-- 1 foobar foobar 12288 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FWaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4mZYhHrbbPxaZJ6F7GkCQWik--
-rw-r--r-- 1 foobar foobar 12288 2011-12-27 10:31
ECRYPTFS_FNEK_ENCRYPTED.FXaFxZ9f-fgkx-RvpJyKgZGzhLRJ9bxXoW4m.8dW9vbe8KkmXQs8vStDJ3w5WPeAlZWmMSafeVDq922-
** Changed in: ecryptfs-utils (Ubuntu)
Status: New => Invalid
** Changed in: ecryptfs-utils (Ubuntu)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/822279
Title:
adduser --encrypt-home does not work.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/822279/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
