subgraph / subgraph-os-issues

Subgraph OS issues repository
73 stars 10 forks source link

Is an unencrypted swap partition safe? #330

Closed burdges closed 6 years ago

burdges commented 6 years ago

I noticed a simplistic install creates an swap partition outside the encrypted volume manager. I've several questions about this:

Is there another layer of encryption that applies to this swap partition? If no, then presumably this swap partition should be considered unsafe and ideally should not be created by default, right?

If we consider a machine with say only 4gb of ram then should we presumably create a swap partition on the encrypted volume. Aside from limited ram, one can supposedly even hibernate to an encrypted swap https://www.linux.com/blog/how-full-encrypt-your-linux-system-lvm-luks although folks encounter trouble doing this with debian https://unix.stackexchange.com/questions/406486/failed-to-mount-encrypted-swap-on-lvm-volume

Anyway, what's the recommended swap configuration these days?

burdges commented 6 years ago

Actually the default installed puts the swap on the encrypted LVM partition, so all is well.