Comment 15 for bug 434232

Revision history for this message
vbargsten (vbargsten) wrote :

@Ulrich Lukas
I agree that only encrypting home, var, tmp.. is a good way to secure personal data while keeping the system fast.
@5tan
Indeed security is gone if someone unnoticedly gets hardware access and returns modified hardware/software; This is true even if the whole root filesystem is encrypted too (think of hardware keylogger/editing mbr code...).

There are several bug reports concerning broken/hidden/vanished cryptsetup password promt at boot and I can not understand why this should not be a serious bug.

I recently changed from opensuse 11.2 to xubuntu 9.10, because of kde3 not beeing supported anymore and kde4 too memory consuming for my laptop. I have an encrypted data partition with home var tmp ....
After updating crypttab of newly installed xubuntu, I am prompted for my password at boot, but I have to enter the password fast before the prompt is gone.
see 475293 468208 468208 461442 ....

Tried to use cryptmount(-early) etc. instead of crypttab. Doesn't work yet automatically, though invoking cryptmount-early init script manually asks for password and creates /dev/mapper/... entry