ADMIN - Explore the new world of system administration! ADMIN is a smart, technical magazine for IT pros on heterogeneous networks. Each issue delivers technical solutions to the real-world problems you face every day. Learn the latest techniques for better:
network security
system management
troubleshooting
performance tuning
virtualization
cloud computing
on Windows, Linux, Solaris, and popular varieties of Unix.
Hard disk encryption with DM-Crypt, LUKS, and cryptsetup
SECRET MESSAGES
Author(s): CLEMENS FRUHWIRTH, MARKUS SCHUSTER
If you’re serious about keeping secrets, try hard disk encryption with DM-Crypt and LUKS.
File encryption is a popular means for ensuring the security and privacy of file-based data. An intruder who breaks through your firewall won’t be able to read your private files if they are encrypted, right? Actually, selective file encryption provided by utilities such as GnuPG covers some of your tracks, but it may not cover all of them. An intruder can still learn about your system – and maybe even reconstruct some of your file data – by snooping through secret files, temporary files, configuration data, and command histories. The /var/spool/cups directory, for example, could yield a treasure trove of data about files you might have printed in the past, and tools such as the Gnome Thumbnail Factory could be storing an unencrypted thumbnail of your encrypted images.
Comments