Hello, I am trying to install ecrypt but end up with the following error:
Additional rpm output:
setting /sbin/mount.ecryptfs_private to root:root 4755. (wrong permissions 0755)
ERROR: module /lib/security/pam_ecryptfs.so is not installed.
warning: %post(ecryptfs-utils-104-1.5.x86_64) scriptlet failed, exit status 1
Is the file “/lib/security/pam_ecryptfs.so” there? I do see it on my system.
I haven’t noticed that message, but then I haven’t been looking for it. What I do find, is that after installing it still does not work automatically. So I need to do:
# pam-config -a --ecryptfs
Maybe there’s a bug in the postinstall scriptlet (perhaps it is run too early).
I have /lib/security/pam_ecryptfs.so on my system.
I tried
# pam-config -a --ecryptfs
but it does not change the fact that when I run “setup your encrypted private directory” it quits with the error
/usr/bin/ecryptfs-setup-private
ERROR: Cannot get ecryptfs version, ecryptfs kernel module not loaded?
I’d forgotten about that.
I’m not sure, but I think it works the second time. If not, then in a root shell, run:
modprobe ecryptfs
This doesn’t happen with normal use, but it does happen the first time for the first user after boot. Once the ecryptfs private directory is set to open on login, it should work without this problem.
Thanks. After reboot, this error is gone. I have yet to learn how to use ecrypt for the moment.
It’s pretty simple, actually.
Put sensitive files in the Private directory (or a subdirectory under there). They look unencrypted to you, but they are actually stored encrypted on the disk.
If you look at your directory “.Private”, that’s where the encrypted files really are. You will have trouble making sense of that directory, because of the encryption. But once your private directory is mounted (which happens automatically on login), you see a virtual copy of the file which you see unencrypted, because “ecryptfs” is handling that behind the scenes.
Thank you for the explanation.