Security Basics mailing list archives

Re: Encrypted Home Directories?


From: Ray Slakinski <ray () sdf1 net>
Date: Tue, 26 Nov 2002 14:40:08 -0500

Could this not be part of the login script that unpacks a gpg file on login? The only issue is re-packing the information, and removing all files put the encrypted package, I guess a deamon that watches login could do that part

You will also need an exclude list, if your providing webspace to those users.

Id be also interested how this will end up working, just my 2 cents

Ray

On Tuesday, November 26, 2002, at 02:23  AM, Sumit Dhar wrote:

Hello Everyone,

Here is something I would like to do: (Could someone tell me if it is
possible on Linux)

-Every user's home directory is encrypted. No one other than the user
(including root) can read the files/directories of that user.
-Every time a user logs in, he/she will need to give a password to decrypt
his/her stuff.
-The root can delete the users files, but not read them.
-The whole process should ideally be completely transparent to the user.

Any pointers to programs that can do this on Linux??

With Regards,
Sumit Dhar
http://www.rootshell.be/~dhar




Current thread: