eCryptfs has been included in Linux since version 2.6.19. Start by loading the ecryptfs module:

# modprobe ecryptfs
$ ecryptfs-setup-private --nopwcheck --noautomount
Mounting

Manually

Executing the wrapper

$ ecryptfs-mount-private

and entering the passphrase is all needed to mount the encrypted directory to the upper directory ~/Private, described in #Ubuntu tools.

Likewise, executing

$ ecryptfs-umount-private

will unmount it again.

这套工具里还有个加密交换区域的功能👍

ecryptfs-setup-swap

监管区域也会被加密,防止有些敏感数据放在交换区域移出内存到硬盘时被别人获取到

Comments

Be the first to add a comment