How does encrypted home folder work?

I’m guessing that a file is created as a loopback device and encrypted (using LUKS?)

What is the mechanism used at user login to decrypt and mount the encrypted $HOME and to re-encrypt it at logout?

I confess an ulterior motive here - SWMBO has recently got her hands on an Acer Aspire one running Linpus Lite and there’s absolutely no security on it :frowning:

Personally I’d dump Linpus and put on openSUSE but it’s her box and she likes the simple interface that Acer have supplied so maybe I can set up the encrypted $HOME as YaST does for openSUSE if I can find out what to do.

Any hints, links, HOWTOs that don’t overload my poor burned-out grey cells :stuck_out_tongue: with spurious information greatly appreciated.

Alan

On 2011-04-11 09:36, fudokai wrote:
> Any hints, links, HOWTOs that don’t overload my poor burned-out grey
> cells :stuck_out_tongue: with spurious information greatly appreciated.

I would simply set up a new user in my computer with encrypted home, with
YaST, then find out how it works.

I use encrypted partitions, but not home. I think it creates a loop mounted
encrypted filesystem of the size you say, in the existing home. It probably
needs some mechanism when login in.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

Whether automatically mounted or if you prefer to custom mount a loop device, note that there is an encryption option

man losetup

Tony

tsu2 wrote:

>
> Whether automatically mounted or if you prefer to custom mount a loop
> device, note that there is an encryption option
>
>
> Code:
> --------------------
> man losetup
>
> --------------------
>
>
> Tony
>
>

Fine, now how does it get mounted at login?


Alan

On 2011-04-15 20:49, Fudokai wrote:
> Fine, now how does it get mounted at login?

No idea. Investigate how YaST / Suse does it. Then you tell us, I’m curious :slight_smile:


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)