[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Some legal trouble with TOR in France
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Matej Kovacic wrote:
> Hi,
>
> this could also be a good idea:
> http://www.ubuntuforums.org/showthread.php?t=120097&highlight=cryptsetup
>
> encryption of harddrives from the scratch.
>
> However, I would create a small partition where there will be keys
> (files) for decryptig root and home partitions. This small partition
> would be encrypted by passphrase. That means you can easily (well...
> :-//) change your passphrase for the system (just re-encrypt this small
> partition with keyfiles againg).
>
> The only critical software part is then /boot partition. But you can
> always fill the /boot up to 100% with random data and run Tripwire
> integrity checking on it. If it is full, it is hard to write additional
> code on it. And if you do integrity checking, you can easily discover if
> something changed.
>
> I am planning to write a small setup guide for cryptsetup on Dapper
> version of Ubuntu Linux.
>
> bye, Matej
ever heard of cryptfs_luks?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (MingW32)
iD8DBQFEaEFVGkOzwaes7JsRA1YAAKCrEiBr19FhyOWbFH1jR9qx6ILPegCbBzJz
/xTN2T8C4dQLrGU7pwGkXps=
=DaHk
-----END PGP SIGNATURE-----