Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 May 2004 08:54:32 +0200
From:      platanthera <platanthera@web.de>
To:        freebsd-questions@freebsd.org, y2kbug@ms25.hinet.net
Subject:   Re: home on a gbde encrypted partion
Message-ID:  <200405230854.36132.platanthera@web.de>
In-Reply-To: <20040523075658.76ffaaa4.y2kbug@ms25.hinet.net>
References:  <200405211749.15890.platanthera@web.de> <200405221254.34138.platanthera@web.de> <20040523075658.76ffaaa4.y2kbug@ms25.hinet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sunday 23 May 2004 01:56, Robert Storey wrote:
> On Sat, 22 May 2004 12:54:29 +0200
>
> platanthera <platanthera@web.de> wrote:
> > On Friday 21 May 2004 17:49, platanthera wrote:
> > > hi all,
> > >
> > > I want to move my home directory to a gbde encrypted partition.
> > > I plan to have only the default dotfiles in /home/xxx (before
> > > mounting the encrypted partition), log in as usual, attach and
> > > fsck the encrypted partion and then mount it 'over' /home/xxx. Is
> > > there anything wrong with this approach?
> >
> > hmm... obviously there is something wrong. I can't unmount my
> > current home directory later. Not really surprising..
>
> Interesting question. File /etc/passwd is where the system determines
> where a user's data files will
> be located. For example, user "robert" on my system:
>
> root@sonic:~> cat /etc/passwd | grep robert
> robert:*:1005:1006:User &:/home/robert:/usr/local/bin/bash
>
> So just create a special user (using sysinstall), perhaps user
> "secure". Instead of putting his login directory at /home/secure, put
> it on /secure (a directory you manually create) and (as root) mount
> /secure on an encrypted partition. After /secure is mounted, login as
> user secure. You'll have to tweak permissions of course so that user
> secure can read/write files on this partition.

hi Robert,
thanks for your reply. In the meantime I decided to move /home 
completely to an encrypted partition, which I attach and mount as root 
before logging in under my user account.
Think that's the easiest approach..

best regards


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200405230854.36132.platanthera>