-
encrypting SWAP by default
I see that some time ago someone released a version of Knoppix 3.2 that would among other things encrypt the swap drive (http://www.bouissou.net/knoppix-mib/...oppix-Mib.html). In the current verson of knoppix, is there an easy way to do this? I use an encrypted persistent home on a USB stick, but when I'm running on any box that has a swap partition, I know I'm leaving clear-text data behind.
Thanks
-
Senior Member
registered user
Re: encrypting SWAP by default
--One way to do this is disable all type 82 partitions (swap) and comment them in /etc/fstab.
--Then create an encrypted filesystem, and also create a swapfile on that FS after mounting it:
[ insert cryptoloop instructions here ]
' mount blah /mnt/encrypted -odefaults,rw,noatime '
' cd /mnt/encrypted '
' time dd if=/dev/zero of=swapcrypt.swp bs=1M count=64 ' == Create 64MB zero-file
' chmod 700 swapcrypt.swp ' == Make sure only root can read it
' mkswap swapcrypt.swp ' == Make it into a swap area
' swapon swapcrypt.swp ' == Activate it
' swapon -s ' == Check it
--That said, see these links:
( Search for " Debian " on this page )
http://wiki.noreply.org/noreply/TheO...tionalSecurity
http://www.ussg.iu.edu/hypermail/lin...08.0/1163.html
http://linuxfromscratch.org/pipermai...ch/002819.html
http://www.gentoo.org/proj/en/harden...yptography.xml
--I'm pretty sure OpenBSD has encrypted swap, if not by default then at least as an option.

Originally Posted by
g4j
I see that some time ago someone released a version of Knoppix 3.2 that would among other things encrypt the swap drive (
http://www.bouissou.net/knoppix-mib/...oppix-Mib.html). In the current verson of knoppix, is there an easy way to do this? I use an encrypted persistent home on a USB stick, but when I'm running on any box that has a swap partition, I know I'm leaving clear-text data behind.
Thanks
Similar Threads
-
By A. Jorge Garcia in forum Hdd Install / Debian / Apt
Replies: 3
Last Post: 06-19-2007, 06:26 PM
-
By Kowood in forum Hdd Install / Debian / Apt
Replies: 3
Last Post: 04-14-2005, 07:57 PM
-
By jj54 in forum General Support
Replies: 1
Last Post: 11-09-2004, 08:16 PM
-
By sirmax in forum General Support
Replies: 7
Last Post: 04-10-2003, 11:21 PM
-
By CubeDweller in forum General Support
Replies: 6
Last Post: 03-26-2003, 08:09 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules

Dell Poweredge R720 8SFF 2.5" x Xeon E5-2680 v2 2.8GHz 20-Cores 128gb 4x Trays
$349.99

Dell PowerEdge R420 Rack Server Intel Xeon 1.90GHz Six-Core 8GB DDR3 RAM
$95.00

Dell PowerEdge R410 Rack Server Dual Intel Xeon 2.53GHz Quadcore 6GB DDR3 RAM
$95.00

Dell PowerEdge R730XD Server 2x E5-2695 V4 = 36 Cores H730p 32GB RAM 4x trays
$649.99

Dell Poweredge R720 8SFF 2.5" 2x Xeon E5-2680 v2 2.8GHz 20-Cores 64gb 4x Trays
$259.99

Dell PowerEdge R620 2x Xeon E5-2630 v2 3.1GHz 2.5" 4-BAY 32GB RAM No OS 2x 495w
$174.95

Dell Poweredge R630 2x Xeon E5-2680 v3 2.5ghz 24-Cores / 64gb / Raid / 2x 1Tb
$374.99

Dell PowerEdge R620 Dual Intel Xeon E5-2640 v2 @2.00GHz 192GB RAM No HDD H710P
$250.00

Dell EMC PowerEdge R440 Xeon silver 4215 2.5GHz 16 GB ram 2x 550W PSU No HDD
$275.00

Dell PowerEdge R530 2x E5-2630v4 H330 iDRAC8 Port Card Riser No PSU/RAM/HDD
$99.99