Encrypted private directories coming to Ubuntu

| | Comments (0) |

Encrypted private directories are the one thing that would get me to upgrade to Ubuntu 8.10 this October. Ubuntu's Dustin Kirkland explains it all:

How does it work?

The underlying technology is a cryptographic virtual filesystem in the Linux kernel called eCryptfs, authored by Michael Halcrow of IBM.

When a user logs into an Ubuntu Intrepid system, their login passphrase is automatically used to decrypt a randomly generated mount passphrase. This mount passphrase will then cryptographically mount ~/.Private onto ~/Private. As long as ~/Private is mounted, the user can read and write sensitive data to files and directories under the virtual filesystem on ~/Private. The actual files stored in the underlying filesystem are encrypted, and located in ~/.Private. The only passphrase required is obtained when logging in (via console, ssh, gdm, etc). And the only files encrypted are those that the user consciously places in ~/Private. The user can then incrementally backup the encrypted ~/.Private directory to off-site storage.

I'd really, really, really like to see a backport of this to Ubuntu 8.04 LTS so I can keep the current version of the distro if I so choose.

I'll be looking at Ubuntu Backports and GetDeb to see if installing it in Hardy is possible. ... or I may just upgrade to Intrepid.

More information:

  • The Ubuntu Wiki on encrypted private directories

  • Leave a comment

    Tech Talk column

    Steven Rosenberg's weekly Tech Talk column, which appeared Saturdays in the Los Angeles Daily News through about October 2009, is available on the Daily News Technology page.

    About this blog






    Steven Rosenberg aims to learn what he does not know. He writes about it here.



    About this Entry

    This page contains a single entry by Steven Rosenberg published on August 7, 2008 9:00 AM.

    Virtualization: It's Greek(or geek) to me was the previous entry in this blog.

    Fat lady sings, and Opera is officially my new favorite browser (this week anyway) is the next entry in this blog.

    Find recent content on the main index or look in the archives to find all content.

    Recent Comments

    Powered by Movable Type 4.25

    Search this blog

    Loading

    LXer

    Links

    Daily News technology
    LXer
    Distrowatch
    Linus' Blog
    David Pogue
    BoingBoing
    Linux Today
    TuxRadar
    Linux.com
    Linux Planet
    The Open Road
    Linux Outlaws podcast
    Dan Lynch
    Fabian Scherschel
    The VAR Guy
    Larry the Free Software Guy
    Chess Griffin
    Linux Reality podcast
    Desktop Linux
    Practical Technology
    Linux Devices
    ZDNet
    ZDNet's Storage Bits
    ZDNet U.K.
    iTWire
    CNet News
    Webware
    Beyond Binary
    TechCrunch
    The Register
    Ars Technica
    Reg Developer
    Computerworld
    Computerworld blogs
    Steven J. Vaughan-Nichols at Computerworld
    Debian
    Planet Debian
    Debian Forums
    Debian News
    debianHELP
    debiantutorials.org
    The Debian User
    Wolfgang Lonien
    Debian-News.net
    Debian Administration
    Debian Admin
    Debian Weather
    Aaron Toponce
    Ubuntu
    Xubuntu
    Kubuntu
    Edubuntu
    Planet Ubuntu
    Ubuntu Forums
    Ubuntu Geek
    Works With U
    OMG! Ubuntu!
    I' Been to Ubuntu
    Tanner Helland
    Dustin Kirkland
    Ubuntu UK Podcast
    Ubuntu Linux Help
    Popey
    Linux Mint
    CrunchBang Linux
    OpenBSD
    OpenBSD Journal
    OpenBSD Ports
    OpenBSD 101
    Planet.OpenBSD.nu
    jggimi's OpenBSD live CD
    DaemonForums
    BSDanywhere
    Marc Balmer
    Denny's OpenBSD blog
    Polarwave's OpenBSD Tips and Tricks
    Binary Updates for OpenBSD
    Puppy Linux
    Damn Small Linux
    Tiny Core Linux
    Lucky 13's Linux blog (lots of Tiny Core)
    Lucky 13's BSD blog
    PCLinuxOS
    Mandriva
    Red Hat
    Red Hat News
    Red Hat Blogs
    Red Hat: Truth Happens
    Red Hat Magazine
    CentOS
    Planet CentOS
    Fedora
    Planet Fedora
    Fedora Forums
    Fedora Docs
    Join Fedora
    Slackware
    Slackbuilds
    Robby's Slackware Packages
    Slackblogs
    dropline GNOME for Slackware
    GNOME Slackbuild
    GWARE - GNOME for Slackware
    Wolvix
    Zenwalk Linux
    Vector Linux
    Slax
    Splack Linux — Slackware for Sparc
    Nonux
    How to Forge
    marc.info BSD and Linux mailing list archive
    FreeBSD
    FreeBSD, the Unknown Giant
    A Year in the Life of a BSD Guru
    NetBSD
    hubertf's NetBSD Blog
    PC-BSD
    Daemon Forums
    FreeBSD Forums
    Planet FreeBSD
    Evilcoder.org
    miwi's Privat Blog
    DragonFlyBSD
    DragonFlyBSD Digest
    DesktopBSD
    BSD Talk podcast
    BSD Magazine
    Rhyous
    OpenSolaris
    MilaX
    BeleniX
    DeLi Linux
    Linux Loop
    Electronista
    The Tech Report
    Engadget
    Gizmodo
    Phoronix
    xkcd – A webcomic of romance, sarcasm, math and language
    Nixie Pixel
    Technology for Mortals
    Thoughts on Technology
    ZaReason
    System 76
    Tiger Direct
    NewEgg
    DealExtreme

    Advertisement

    Other blogs

    Neuheisel/Johnson Pt. 3 in Inside UCLA with Jon Gold
    Live: U.S.-Chile at Home Depot Center in 100 Percent Soccer
    Girls' basketball: Bell-Jeff wins again in Daily News High School Spotlight
    Decision Time in Inside USC with Scott Wolf
    Countdown to Debian Squeeze in CLICK