Results 1 to 3 of 3

Thread: Encrypting OS, how do I do this?

  1. #1
    Join Date
    Dec 2007
    Beans
    90

    Encrypting OS, how do I do this?

    I'm considering adding an extra level of security to my servers and am considering encrypting my OS.
    -Is this a waste of time?
    -Should I be looking more at encryting my data, my OS or both?
    -Does encrypting decrease system performance very much?
    -Does the length of my passphrase determine the security of my encryption? ( I have a 44 character passphrase that is TOUGH).

    Any suggestions or ideas?
    Abit IP35 Pro, E6750, 4GB Ram, XFX Nvidia 8600, 4 Raptors, 4 500GB WD's, 2 250GB WD's, Plextor Sata
    P4 2.53Ghz, 2GB Ram, 5 160GB WD's, 2 120GB HD's
    P4 2.6Ghz, 2GB Ram, 2 120GBHD, 3 80GB HD

  2. #2
    Join Date
    Feb 2008
    Location
    US
    Beans
    2,782
    Distro
    Ubuntu 8.04 Hardy Heron

    Re: Encrypting OS, how do I do this?

    unless someone is requiring you to encrypt the OS I would recommend just encrypting your data. There really isnt much additional security when you encrypt the OS files especially when you talk about linux. It really only helps when you have consider physical access. It has no effect if someone attempts to hack your network. However if someone physically takes your harddrives they wouldnt be able to run the OS until they crack the encryption. If they are able to crack this proctection then I am willing to bet that they can crack the encryption on your data. On top of that it only adds additional complexity to your OS and will make it sluggish because all reads and writes to the harddrive will require encryption or decryption.
    Desktop: Q6600 OC: 343 x 9, 4 GB RAM, 8600 GTS Twinview (22",17"), 1.5 TB RAID 5
    Laptop: Lenovo T61 T7300 @ 2 GHz, 2GB RAM, Nvidia 140M Quadro, 160 GB harddrive
    Remember to mark posts as [SOLVED] when your problem is resolved

  3. #3
    Join Date
    Jun 2006
    Location
    Switzerland
    Beans
    Hidden!
    Distro
    Kubuntu Jaunty Jackalope (testing)

    Re: Encrypting OS, how do I do this?

    Quote Originally Posted by tamoneya View Post
    unless someone is requiring you to encrypt the OS I would recommend just encrypting your data.
    I would adivce differently. Do you know what you all have to encrypt so that every last part of a data file in the system is encrypted? Just data would mean only /home folder (normally)... what about swap? what abuot /tmp? what /var/lib/mysql? ....? Full disk encryption will make it simpler to not forget anything.

    There will be decreased performance but you don't notice much. I only notice it when I move large files accross different partitions. For normal usage you don't notice anything. At least I don't notice when I'm playing WoW with Wine on my 1.6ghz Athlon with 1 GB ram and 128mb nvidia card.

    Well, longer passwords are harder to brute force. However if you have a 20 char password that should be - at least today - virtually impossible to bruteforce.

    Quote Originally Posted by tamoneya View Post
    It really only helps when you have consider physical access. It has no effect if someone attempts to hack your network.
    Encryption only helps against someone who gets physical access. It will not help in any network related event.

    And you encrypt your system (easiest) upon installation using the alternate cd. In there you can then set it all up.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •