ADMIN - Explore the new world of system administration! Special introductory offer! Order by September 30th to save 10% off the regular subscription price! Each issue delivers technical solutions to the real-world problems you face every day. Learn the latest techniques for better:
network security
system management
troubleshooting
performance tuning
virtualization
cloud computing
on Windows, Linux, Solaris, and popular varieties of Unix.
Workshop: Encrypting hard disks with DM-Crypt and LUKS
THE WHOLE DISK
Author(s): MICHAEL NERB
Encrypting a home directory is easy. Encrypting your whole hard disk – including the root filesystem – takes a little more effort.
Encrypting individual filesystems is no big deal; in fact, some distributions allow you to encrypt directories as part of the installation routine. But encrypting the home directory on your laptop is a job half done. Dishonest finders can still draw conclusions from log and configuration files. If you’re serious about providing security through encryption, you need to protect the whole hard disk against spying – something that no distribution can do out of the box. Things start to become more complex if you need to protect the root filesystem. Neither Suse nor Debian Linux give users a tool to help encrypt the root filesystem during the install (or later). That means you’ll need to roll up your shirt sleeves for some hands-on configuration
Comments