Sponsored Content
Special Forums Cybersecurity How to protect Linux by full disk encryption? Post 302905646 by Opr_Sys on Thursday 12th of June 2014 04:23:00 PM
Old 06-12-2014
Debian

Quote:
Originally Posted by postcd
Hello, you may know that linux root password can be resetted (example from rescue mode), so this means linux server offers no protection against access of data when you get somehow remote or physical access to server?

So my question is how i can full encrypt linux webserver disk so no one can read disk data even he got physical access to the server? the best way, links? thank you
Choose disk encryption or LvM2 Encrypted from the set-up menu when you install it! So no matter if they steal your disks, without your password they're screwed.

You can of course also remove the rescue option from the boot menu and also password protect the Bootloader as well.


But of course you can then make it double difficult, select LUKS or GnuPG and use it on your documents as well, just to be that extra bit "Obstinate!" Privacy is a Right, not a feature!
 

7 More Discussions You Might Find Interesting

1. News, Links, Events and Announcements

Microsoft Is Using Linux To Protect Its Own Web Site

Here is a great news story: http://story.news.yahoo.com/news?tmpl=story&cid=74&e=9&u=/cmp/13100775 (3 Replies)
Discussion started by: Neo
3 Replies

2. UNIX for Advanced & Expert Users

disk full

Please solve the following NOTICE HTFS:No space on dev hd(1/42) (2 Replies)
Discussion started by: msuheel
2 Replies

3. Linux

Disk full 100%

one of my servers / was full by 100% i cleard some space, now though i have enough space on / partition still df is showing disk usage as 100% am not able to create any single txt file ? why so ? (3 Replies)
Discussion started by: bryanabhay
3 Replies

4. UNIX for Advanced & Expert Users

Is it possible to password protect directories in linux?

Hi, I am using Red Hat OS 5.0, is there any way that i can password protect directories. I know i can change permission so that no other user can access the content, but sometimes in my office environment i need to share vnc terminal with other people from my login itself. So i want that if user... (1 Reply)
Discussion started by: sarbjit
1 Replies

5. UNIX for Advanced & Expert Users

Disk Space full

I was tryin to copy a large file under /tmp location. I guess the disk space got full and i got fork error. Then I tried removing some files but the shell did not let me do anything bash> rm apache22.tar bash: fork: Not enough space bash> pwd /tmp bash> vmstat 1 bash: fork: Not... (3 Replies)
Discussion started by: mohtashims
3 Replies

6. Cybersecurity

How to encrypt / password protect big Linux file?

Hello, i have around 20 backup files tar.gz with sensitive data. The sizes of these files are from around 200MB to around 20GB I want to secure these files so no one can read, use its contents. only me the method of encrypting, password protecting them should be fast, so for example in... (1 Reply)
Discussion started by: postcd
1 Replies

7. Shell Programming and Scripting

Disk full alerts

i want to create 1 script to monitor 1 particular filesystem out of the diferent filesystems. if disk space of that particular filesystem increases by 80% it sends an alert mail to an email id ---------- Post updated at 04:18 PM ---------- Previous update was at 04:17 PM ---------- no. I am... (1 Reply)
Discussion started by: rakeshhhhhhhh
1 Replies
mzip(1) 						      General Commands Manual							   mzip(1)

Name
       mzip - change protection mode and eject disk on Zip/Jaz drive

Note of warning
       This  manpage  has been automatically generated from mtools's texinfo documentation, and may not be entirely accurate or complete.  See the
       end of this man page for details.

Description
       The mzip command is used to issue ZIP disk specific commands on Linux, Solaris or HPUX. Its syntax is:

       mzip [-epqrwx]

       Mzip allows the following command line options:

       e      Ejects the disk.

       f      Force eject even if the disk is mounted (must be given in addition to -e).

       r      Write protect the disk.

       w      Remove write protection.

       p      Password write protect.

       x      Password protect

       u      Temporarily unprotect the disk until it is ejected.  The disk becomes writable, and reverts back to its old state when ejected.

       q      Queries the status

       To remove the password, set it to one of the passwordless modes -r or -w: mzip will then ask you for the password, and unlock the disk.	If
       you have forgotten the password, you can get rid of it by low-level formatting the disk (using your SCSI adaptor's BIOS setup).

       The  ZipTools  disk shipped with the drive is also password protected.  On Dos or on a Mac, this password is automatically removed once the
       ZipTools have been installed.  From various articles posted to Usenet, I learned that the  password  for  the  tools  disk  is  APlaceForY-
       ourStuff.   Mzip  knows	about  this  password, and tries it first, before prompting you for a password.  Thus mzip -w z: unlocks the tools
       disk.  The tools disk is formatted in a special way so as to be usable both in a PC and in a Mac.  On a PC, the Mac filesystem appears as a
       hidden file named `partishn.mac'.  You may erase it to reclaim the 50 Megs of space taken up by the Mac filesystem.

Bugs
       This  command  is a big kludge.	A proper implementation would take a rework of significant parts of mtools, but unfortunately I don't have
       the time for this right now. The main downside of this implementation is that it is inefficient on some architectures  (several	successive
       calls to mtools, which defeats mtools' caching).

See Also
       Mtools' texinfo doc

Viewing the texi doc
       This  manpage  has  been automatically generated from mtools's texinfo documentation. However, this process is only approximative, and some
       items, such as crossreferences, footnotes and indices are lost in this translation process.  Indeed, these items have no appropriate repre-
       sentation  in  the manpage format.  Moreover, not all information has been translated into the manpage version.	Thus I strongly advise you
       to use the original texinfo doc.  See the end of this manpage for instructions how to view the texinfo doc.

       *      To generate a printable copy from the texinfo doc, run the following commands:

		     ./configure; make dvi; dvips mtools.dvi

       *      To generate a html copy,	run:

		     ./configure; make html

	      A premade html can be found at: `http://mtools.linux.lu' and also at: `http://www.tux.org/pub/knaff/mtools'

       *      To generate an info copy (browsable using emacs' info mode), run:

		     ./configure; make info

       The texinfo doc looks most pretty when printed or as html.  Indeed, in the info version certain examples are difficult to read due  to  the
       quoting conventions used in info.

mtools-3.9.8							      02Jun01								   mzip(1)
All times are GMT -4. The time now is 11:24 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy