söndag 12 november 2006

Encrypted home directories on a debian laptop

This posting is in English. Do you think it should be in Swedish instead? Or should i post it in two versions? Comment below if you have an opinion on this topic.

Creating encrypted home directories
It is good to have the content on your laptop encrypted - especially on a laptop which is at a much higher risk of being stolen or lost.
I followed this guide, which was really easy. It takes below an hour to setup if you do NOT know how to do it but have some basic linux skills.
If you have done it before, it just takes a few minutes.

The steps are (under debian) (Later edit: also works fine under ubuntu!)
Your username is $USER
  1. install fuse
  2. install encfs
  3. add module fuse to be loaded at startup, echo "fuse" >>/etc/modules
  4. add a user to be allowed to use fuse: adduser $USER fuse
  5. follow the guide on this blog, with the addition to change the ownership of /home/.enc/$USER/.encfs5
  6. done! check that it works by logging in and then type mount. It should display your home directory mounted as encfs.
Logging in with ssh will unfortunately not work this way (this is because ssh does not use pam to authenciate users). Workaround:
  1. create a user which is used only for login via ssh:
    (sudo if on ubuntu) adduser ssh$USER
  2. login with: ssh ssh$USER@yourlaptop
  3. swith to your regular account with su - $USER

Inga kommentarer: