Table of Contents
Advertisement
the procedure is the same as in
Installation"
48.1.3 Creating an Encrypted File as a
Instead of using a partition, it is possible to create an encrypted file of a certain size
that can then hold other files or folders containing confidential data. Such container
files are created from the same YaST dialog. Select Crypt File and enter the path to the
file to create along with its intended size. Accept the proposed formatting settings and
the file system type. Then specify the mount point and decide whether the encrypted
file system should be mounted when the system is booted.
The advantage of encrypted container files is that they can be added without repartition-
ing the hard disk. They are mounted with the help of a loop device and behave just like
normal partitions.
48.1.4 Encrypting the Content of Removable
YaST treats removable media like external hard disks or USB flash drives the same as
any other hard disk. Container files or partitions on such media can be encrypted as
described above. However, do not select to mount these media when the system is
booted, because they are usually only connected while the system is running.
48.2 Using vi to Encrypt Single Files
The disadvantage of using encrypted partitions is that while the partition is mounted,
at least root can access the data. To prevent this, vi can be used in encrypted mode.
Use vi -x filename to edit a new file. vi prompts you to set a password, after
which it encrypts the content of the file. Whenever you access this file, vi requests the
correct password.
876
Installation and Administration
Section 48.1.1, "Creating an Encrypted Partition during
(page 874).
Container
Media
Advertisement
Table of Contents
Troubleshooting
