[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [TEKNIK] Kryptering af /home



Citat af "Jens Tornøe" <sslug@sslug>:

Kære gruppe



Jeg har en Debian 5 server kørende, hvor jeg gerne vil kryptere /home.
Maskinen bliver primært brugt som Samba-filserver i et Windows-netværk, og
jeg vil gerne have at krypteringen skal være transparent for
Windows-maskinerne. Dvs. at logon til Sambaserveren skal foregå som normalt
uden at brugeren behøver at indtaste et ekstra brugerID+password for at åbne
den krypterede partition. Med andre ord skal et normalt brugerlogon være nok
til at åbne krypteringen. Min idé er, at det ikke skal være muligt at fjerne
harddisken, mounte den i en anden Linux-maskine, og på den måde få adgang
til /home.

Hvis du laver en partition, lægger luks ovenpå, og et filsystem ovenpå igen, så kan du montere dette filsystem på /home. Hedder din partition /dev/sda1 kan du gøre det således:

# cryptsetup luksFormat /dev/sda1
# cryptsetyp luksOpen /dev/sda1 cryptfs
# mkfs.ext3 /dev/mapper/cryptfs
# mount /dev/mapper/cryptfs /home

Når dit filsystem er oprettet behøver du kun at køre:

# cryptsetyp luksOpen /dev/sda1 cryptfs
# mount /dev/mapper/cryptfs /home

Herefter vil alt være som normalt, dog med den forskel at /dev/sda1 skal "låses op" inden den kan bruges.

/kallenberg



 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2009-04-01, 02:01 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *