PDA

View Full Version : [ubuntu] How secure are my files in Ubuntu?



DJRepresent
April 24th, 2008, 10:35 PM
How secure are my files in Ubuntu? If lets say I want to keep certain documents hidden from others, is there a way to protect them better than what NTFS currently offers?

By saying NTFS I mean that in a Windows based machine, one could always unscrew the hard drive and load it onto another computer as a slave or via USB, take ownership, and download the files. I heard that on Linux you can password protect certain files / directories and if you forget your password, you've lost your data for good.


Thanks

DJ

techolous
April 25th, 2008, 12:22 AM
By saying NTFS I mean that in a Windows based machine, one could always unscrew the hard drive and load it onto another computer as a slave or via USB, take ownership, and download the files. I heard that on Linux you can password protect certain files / directories and if you forget your password, you've lost your data for good.


What you are talking about is file encryption. I personally use 'cryptkeeper (apt:cryptkeeper)', which is a frontend to 'encfs'. You could do this on windows with software like TrueCrypt (http://www.truecrypt.org/). (or BitLocker in some versions of Vista)

Be aware that some programs might cache copies or metadata in other places. This is why people opt for full disk encryption, which I won't cover here.

Dr Small
April 25th, 2008, 01:01 AM
There is always Truecrypt and GPG.
I use GPG to encrypt my files, though.

aysiu
April 25th, 2008, 01:03 AM
Unless they're encrypted, your files are no more secure than they would be on Windows or Mac. Physical access is root access.

kevdog
April 25th, 2008, 03:27 AM
This site is a good reference since it summarizes some file encryption techniques:
http://www.movingtofreedom.org/2007/02/21/howto-encfs-encrypted-file-system-in-ubuntu-and-fedora-gnu-linux/

Notice whole disk encryption is a separate option and not discussed here.

hyper_ch
April 25th, 2008, 09:12 AM
with the alternate install cd you can fully encrypt your system upon installation....

If you choose to do that... also make backups of your data... in case your harddisk fails at critical points you may not gain access to the encrypted data at all.

kevdog
April 26th, 2008, 02:00 AM
Just a question...

If your harddrive fails at critical point on an non-encrypted disk -- wouldn't you be unlikely to recover files from it either?? Or is the recovery of files using disk encryption much more sensitive to hard drive encryption?

hyper_ch
April 26th, 2008, 11:25 AM
Well, if you have a bad block on a non encrypted drive, then it will affect one for maybe a few other files... however if you have a bad block on a critical part of the encryption partition you may not be able to unlock all encrypted data any longer.