TrueCrypt and using fuse with encfs would store it as encrypted files. TrueCrypt would be a container that would hold files and it would need to be unlocked before accessing. encfs would require mounting of a directory which would be viewed as a file system. So basically if you were to look at the directory it would appear all gibberish, encrypted file names and the contents would be encrypted, but mounted it would show up as normal file names and decrypted files.
As for the ubuntu method, you would need to enable encyption on each partition, if you do separate tmp partitions that are nonexec and all that then you would need to set that up. In the past I have always just created one partition on the machines I was enabling encryption on so tmp would be covered in that setup. You would of course have to enter a password for all of this, unless there is key based methods, which would in many ways defeat the purpose of protecting someone from gaining access to the files. On Mon, Dec 8, 2008 at 9:11 PM, Jeff Lasman <[email protected]> wrote: > On Monday 08 December 2008 06:03 pm, Peter Manis wrote: > > > Install the system using the alternative cd and enable encryption on > > the partition during the setup. It's pretty painless going that > > route. You can also use fuse to do encryption. > > That's a possible solution; the only issue is that it does eliminate (I > think) the ability to keep a copy of the partition up-to-date on a > thumb drive for reading on MSWindows. > > Is there a solution for a file that decrypts to a logical partition? > That's what the current commercial product does. > > And ... > > If I do decide to use your idea (which sounds interesting), can I > encrypt /tmp as well, and symbolically link all tmp and temp > directories to subdirectories inside /tmp? > > And what about the swap partition? If I can do all that, then this > sounds interesting. > > Thanks! > > Jeff > -- > Jeff Lasman, Nobaloney Internet Services > P.O. Box 52200, Riverside, CA 92517 > Our jplists address used on lists is for list email only > voice: +1 951 643-5345, or see: > "http://www.nobaloney.net/contactus.html"; > _______________________________________________ > LinuxUsers mailing list > [email protected] > http://socallinux.org/cgi-bin/mailman/listinfo/linuxusers > -- Peter Manis (678) 269-7979
