-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Matej Kovacic wrote: > Hi, > > this could also be a good idea: > http://www.ubuntuforums.org/showthread.php?t=120097&highlight=cryptsetup > > encryption of harddrives from the scratch. > > However, I would create a small partition where there will be keys > (files) for decryptig root and home partitions. This small partition > would be encrypted by passphrase. That means you can easily (well... > :-//) change your passphrase for the system (just re-encrypt this small > partition with keyfiles againg). > > The only critical software part is then /boot partition. But you can > always fill the /boot up to 100% with random data and run Tripwire > integrity checking on it. If it is full, it is hard to write additional > code on it. And if you do integrity checking, you can easily discover if > something changed. > > I am planning to write a small setup guide for cryptsetup on Dapper > version of Ubuntu Linux. > > bye, Matej
ever heard of cryptfs_luks? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (MingW32) iD8DBQFEaEFVGkOzwaes7JsRA1YAAKCrEiBr19FhyOWbFH1jR9qx6ILPegCbBzJz /xTN2T8C4dQLrGU7pwGkXps= =DaHk -----END PGP SIGNATURE-----