From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1RhmTG-0004uj-O7 for garchives@archives.gentoo.org; Mon, 02 Jan 2012 18:18:55 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6186C21C187; Mon, 2 Jan 2012 18:18:36 +0000 (UTC) Received: from mail-vw0-f53.google.com (mail-vw0-f53.google.com [209.85.212.53]) by pigeon.gentoo.org (Postfix) with ESMTP id 97DE521C31C for ; Mon, 2 Jan 2012 18:16:59 +0000 (UTC) Received: by vbih1 with SMTP id h1so5041838vbi.40 for ; Mon, 02 Jan 2012 10:16:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=11ZRVUhze0OG33ofP/iHczOHsa6E8FyiL/QBAy07eHE=; b=Mwe+wLeA3ukNTGNlPTJ2zgobYYgrWcwwR4xJSfbpveCTilJoR6VPiH4ycb7lfLu2WA ct9uMKGrtCm3CIabqNhMtVer69Lg6rU06kgtHiYGvz9jawHI+q+YIxNUvmCIEzrC0VEJ wEuNWf3wMlE4fKKHlVUj+97hktfrEZ+rTXV3E= Received: by 10.52.36.166 with SMTP id r6mr10871398vdj.53.1325528219174; Mon, 02 Jan 2012 10:16:59 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.52.163.35 with HTTP; Mon, 2 Jan 2012 10:16:38 -0800 (PST) In-Reply-To: <20120102170648.13824f89@hactar.digimed.co.uk> References: <201201020907.55698.stephane@22decembre.eu> <4F01A4F8.50209@binarywings.net> <20120102125803.686b65eb@digimed.co.uk> <201201021412.31844.stephane@22decembre.eu> <20120102132931.36bbfd6f@digimed.co.uk> <4F01BE82.1010601@binarywings.net> <20120102170648.13824f89@hactar.digimed.co.uk> From: Kfir Lavi Date: Mon, 2 Jan 2012 20:16:38 +0200 Message-ID: Subject: Re: [gentoo-user] crypt my home repository To: gentoo-user@lists.gentoo.org Content-Type: multipart/alternative; boundary=20cf3079bb18a4c63604b58f96dc X-Archives-Salt: d09ef877-de4f-4bcf-9657-94d87c0570c9 X-Archives-Hash: 0a41bb7eaee2380a6bdb6e432847ac32 --20cf3079bb18a4c63604b58f96dc Content-Type: text/plain; charset=UTF-8 On Mon, Jan 2, 2012 at 7:06 PM, Neil Bothwick wrote: > On Mon, 02 Jan 2012 15:26:10 +0100, Florian Philipp wrote: > > > > In that case, you probably want to use encfs to encrypt each home > > > directory separately. dmcrypt works on block devices, so a single home > > > partition would have a single password. > > > dmcrypt supports multiple simultaneous passwords (I think 4 or something > > like that). Of course, then every user can unlock every home directory > > Which is why I recommended ecryptfs (I've only just noticed that the > previous posts mentioned encfs, that's a FUSE filesystem that is > unnecessary now the kernel have ecryptfs included). > > Thanks, I didn't know about that. I'll try that, as I'm using encfs, and basically it works flawlessly. But running without fuse, is better. Kfir > It's not the multiple passwords, it's separately locking each user's > data. > > -- > > Neil Bothwick > > Guillotine operator wanted. Chance to get ahead. > --20cf3079bb18a4c63604b58f96dc Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Mon, Jan 2, 2012 at = 7:06 PM, Neil Bothwick <neil@digimed.co.uk> wrote:
On Mon, 02 Jan 2012 15:26:10 +0100, Florian Philipp wrote= :

> > In that case, you probably want to use encfs to encrypt each home=
> > directory separately. dmcrypt works on block devices, so a single= home
> > partition would have a single password.

> dmcrypt supports multiple simultaneous passwords (I think 4 or somethi= ng
> like that). Of course, then every user can unlock every home directory=

Which is why I recommended ecryptfs (I've only just noticed that = the
previous posts mentioned encfs, that's a FUSE filesystem that is
unnecessary now the kernel have ecryptfs included).


Thanks,
I didn't know about that.
I= 9;ll try that, as I'm using encfs, and basically it works flawlessly. <= br>But running without fuse, is better.

Kfir
=C2=A0
It's not the multiple passwords, it's separately locking each user&= #39;s
data.

--

Neil Bothwick

Guillotine operator wanted. Chance to get ahead.

--20cf3079bb18a4c63604b58f96dc--