Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 04-08-2006 Installation Manual page 874

editor. Refer to
information.
WARNING: Encrypted Media Is Limited Protection
Be aware that with the methods described in this chapter, you cannot protect
your running system from being compromised. After the encrypted media is
successfully mounted, everybody with appropriate permissions has access to
it. However, encrypted media is useful for cases such as loss or theft of your
computer or to prevent unauthorized individuals from reading your confidential
data.
48.1 Setting Up a Crypto File System
Use YaST to encrypt partitions or parts of your file system during installation or in an
already installed system. However, encrypting a partition in an already installed system
is more difficult because you have to resize and change existing partitions. In such
cases, it may be more convenient to create an encrypted file of a defined size in which
to store other files or parts of your file system. To encrypt an entire partition, dedicate
a partition for encryption in the partition layout. The standard partitioning proposal as
suggested by YaST does not, by default, include an encrypted partition. Add it manually
in the partitioning dialog.
48.1.1 Creating an Encrypted Partition
WARNING: Password Input
Observe the warnings about password security when setting the password for
encrypted partitions and memorize it well. Without the password, the encrypted
data cannot be accessed or restored.
The YaST expert dialog for partitioning, described in
(page 161), offers the options needed for creating an encrypted partition. To create a
874 Installation and Administration
Section 48.2, "Using vi to Encrypt Single Files"
with YaST
during Installation
(page 876) for more
Section 7.5.8, "Partitioner"