On 12 May 2010 23:11, Tony Arnold <tony.arn...@manchester.ac.uk> wrote:
> I'm seeking advice and wisdom! > > My laptop is currently fully encrypted. It has a partition that contains > a crypt that contains some logical volumes that contain all file systems > except /boot > > It occurs to me I might be better off just encrypting my home directory. > > I think this might improve performance as the system would not have to > decrypt the operating system files. Not sure how big an impact this > would have. > > Presumably I would no longer get prompted for a pass phrase every time I > switch the machine on. Very secure, but annoying! > > Am I right in thinking that the home dir encryption effectively uses my > password to protect it, or would I have to enter my password and an > encryption pass phrase every time I log on? > > Any thoughts? > > Regards, > Tony. > -- > Tony Arnold, Tel: +44 (0) 161 275 6093 > Head of IT Security, Fax: +44 (0) 870 136 1004 > University of Manchester, Mob: +44 (0) 773 330 0039 > Manchester M13 9PL. Email: tony.arn...@manchester.ac.uk > If you have a laptop hard drive that often contains sensitve personal data or is used for any kind of business or holds information that needs to be covered under the data protection act, then it advisable to have the whole system encrypted in case it falls into the wrong hands. Other than that I would just use home dir encryption. I am using home dir encryption for the first time on my new lucid install. Your home dir is decripted when you login to X windows - i.e the normal desktop gdm login. Note that you cant use automatic gdm login, there is a warning in the lucid installer against this. Using just the encrypted home dir has worked fine for me and I have not had any access or performance problems. -- John Stevenson jr0cket.com leanagilemachine.com
-- ubuntu-uk@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk https://wiki.ubuntu.com/UKTeam/
