[plug] Disk/partition/fs encryption

[Chris Hoy Poy]

If it's part of a general lockdown for your laptop, and you feel strongly
enough to do that - don't forget the other stuff you probably want to do as
well ...

My team lead published this gem, it's what we use to haze new staff..

https://github.com/lfit/itpol/blob/master/linux-workstation-security.md



Cheers
/Chris

On Mon, 30 Mar 2020, 11:46 am Steve Baker, <steve at iinet.net.au> wrote:

>
> Thanks Chris and Brad for the tip on LUKS, will look into it. Cheers!
>
>
> On 30/3/20 10:59 am, Chris Hoy Poy wrote:
> > Yes, use LUKS / cryptsetup during install process.
> >
> > I have my own laptop set up in this manner, along with selinux,
> > secureboot and all the bios lockdown stuff you should have.
> >
> > Works out of the box with FedoraCore + Ubuntu (though I haven't done a
> > run through with Ubuntu in a couple years) on recent-ish hardware.
> >
> > Cheers
> > /Chris
> >
> >
> > On Mon, 30 Mar 2020, 10:54 am Steve Baker, <steve at iinet.net.au
> > <mailto:steve at iinet.net.au>> wrote:
> >
> >     Hi All,
> >
> >     I have Ubuntu Linux installed on my laptop, and I need to use some
> >     level
> >     of encryption on (some of) the contents of the storage.
> >
> >     It's a dual-boot with Windows, I don't need the Windows partition
> >     encrypted. Currently the Linux installation uses a single
> >     partition, I
> >     can either encrypt that OR split off the contents of /home to a new
> >     partition and just encrypt that.
> >
> >     Is it possible to just encrypt a single partition / filesystem like
> >     this? Or is it better to encrypt the whole disk? Is encrypting the
> >     whole
> >     disk compatible with Linux/Windows dual-boot?  What is the
> >     recommended
> >     method/software/tools for this?
> >
> >     Thanks for your help.
> >
> >     Regards,
> >     Steve
> >
> >     _______________________________________________
> >     PLUG discussion list: plug at plug.org.au <mailto:plug at plug.org.au>
> >     http://lists.plug.org.au/mailman/listinfo/plug
> >     Committee e-mail: committee at plug.org.au <mailto:
> committee at plug.org.au>
> >     PLUG Membership: http://www.plug.org.au/membership
> >
> >
> > _______________________________________________
> > PLUG discussion list: plug at plug.org.au
> > http://lists.plug.org.au/mailman/listinfo/plug
> > Committee e-mail: committee at plug.org.au
> > PLUG Membership: http://www.plug.org.au/membership
>
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://lists.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.org.au
> PLUG Membership: http://www.plug.org.au/membership
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20200330/fba44659/attachment.html>