[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: FAQ about encrypting harddrive using key on USB key?



On Dec 8, 2007 12:45 PM, Ron Johnson <ron.l.johnson@cox.net> wrote:
> > [ I want to encrypt laptop, with key on USB drive]
> > Is there a different FAQ I should be using?
> >
> > Thanks all, and I hope to soon join you in debian-land.
>
> http://luks.endorphin.org/
>
> Install cryptsetup and read /usr/share/doc/cryptsetup/CryptoRoot.HowTo.

Thanks, I'll check that out.

>
> Slightly OT, but do you *really* need /boot, /usr, /bin, etc, to be
> encrypted?
>
> ISTM that only /home, /tmp & swap files/partitions (and /var?) need
> be partitioned.  That way, you could still boot the machine and do
> maintenance if you misplaced your dongle.

Of course, if I lose all copies of the dongle, being able to do maintenance
isn't terribly useful...  Besides, the truly paranoid understand that someone
could slip a keylogger into /usr/bin/perl!  Ideally,



Reply to: