Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The default encryption on Ubuntu, if you select 'Encrypt my home folder' during setup, uses ecryptfs on your home folder, and cryptswap for swap. For some reason, /tmp/ isn't encrypted by default as far as I can tell.

AFAIK the main benefit is: if you want to run a multi-user or headless system, you need the network stack brought up before a password is entered - which home directory encryption provides and FDE can't.



> For some reason, /tmp/ isn't encrypted by default as far as I can tell.

It does not give any extra benefit because tmpfs only resides in RAM, and disk encryption typically only concerns data at rest.

If you come to a point where you want to have /tmp/ encrypted, you would rather encrypt the whole RAM. (Does anyone actually do that?)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: