search

forter / security-101-for-saas-startups

security tips for startups
Other
4.61k stars 292 forks source link

False information about Linux encryption #49

Closed agilob closed 7 years ago

agilob commented 7 years ago

Linux users would require disk reformatting.

I understand that the tutorial is for basic users and it shouldn't cover things like dm-crypt, veracrypt etc, but the information cited above is not true and it's just spreading FUD across less technical users about Linux. There are a few ways to encrypt system or home folder for existing or future users. It's been widely supported for years now, eg. This tutorial is from 2012, official guide for existing disk encryption from Canonical from 2012, there are more sources and tutorials how to do it, but let's just assume that those are enough for basic users.

itaifrenkel commented 7 years ago

@agilob Encrypting the home folder does not cover important system files. Would you be able to provide a link to encrypting the entire drive on ubuntu without re-installing the operating system? If not, we can add a link to the tutorial you mentioned, but I suspect it's not on-par with mac/windows full disk encryption.

FlorianWendelborn commented 7 years ago

@itaifrenkel Worst case you can boot a live system from a stick and manually add a LUKS container on your hard drive. Not sure if it supports on-the-fly encryption, but with a copy onto a different drive it's definitely possible without re-installing.

itaifrenkel commented 7 years ago

@dodekeract I would need a blog post or a stackoveflow discussion that explains it. That's too low level for this repository.