[ubuntu-uk] Encrypt whole disk or just home dir?

[John Stevenson]

On 13 May 2010 07:24, Tyler J. Wagner <tyler at tolaris.com> wrote:

> On Thursday 13 May 2010 01:10:44 John Stevenson wrote:
> > If you have a laptop hard drive that often contains sensitve personal
> data
> > or is used for any kind of business or holds information that needs to be
> > covered under the data protection act, then it advisable to have the
> whole
> > system encrypted in case it falls into the wrong hands.
>
> Encrypting home dir + swap, and using a /tmp ram disk, is sufficient even
> for
> data protection act requirements. Everything written outside those three
> areas
> are operating system files only.
>
> How to convert existing homes to crypto, plus swap and tmp:
>
>
> http://www.tolaris.com/2009/11/14/securing-laptops-with-ecryptfs-cryptsetup-
> and-tmpfs/<http://www.tolaris.com/2009/11/14/securing-laptops-with-ecryptfs-cryptsetup-%0Aand-tmpfs/>
>
> Tyler
>

You would want to consider /var if you have local business applications
running on the laptop.


-- 
John Stevenson
jr0cket.com
leanagilemachine.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-uk/attachments/20100513/16d2df8e/attachment.htm