0

I want to check how safe is this solution, I can't find on the web what I have and the differences in scenarios I found make me uneasy especially we are talking about security.

What I have is one hard drive with 3 partitions, 2 with ext4 and one swap. / - ext4 swap /home - encrypted with Luks - formatted with ext4

I have encryption key stored on my root partition in /root folder, but I am feeling this is not very safe. Is that safe? the root partition is not encrypted so it feels unsafe.

if you could advise it would be fab :)

Improve this question
1
  • When you ask safe, you need to add "safe against...". Anything can be safe against X but unsafe against Y. For encrypted partitions, normally the password (to decrypt the key and then decrypt the partition) is asked at boot, which is not a problem for an end-user computer, but a problem for a server. If it is instead hardcoded in some files on the same disk, then access to the disk means access to everything, including what is encrypted. There are other solutions for a server. Commented Aug 23, 2019 at 21:39

1 Answer 1

Reset to default
2

Encryption protects your system from offline access, i.e. access to your hardware.

If someone can access your hard drive, mount your root partition and recover the encryption keys, nothing is stopping them from decrypting your other partitions and mounting them as well.

Improve this answer

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.