02-07-2017
Encryption in Linux?
Hi, we have a brand new Centos 6.8 build, and after some discussion it seems that there is some interest in securing the entire system using whole disk encryption.
What is/are the best option/s, and is this something that can be done after Centos is installed (like for example PGP WDE in Windows allows you to do the encrypting once the OS is installed), or does it require formatting/starting over from scratch?
Should probably also ask, is there a significant advantage to encrypting the whole disk, rather than just the partition/s containing their sensitive data (which is really what they are concerned with losing)? This is a pretty big physical server so it's not a mobile device/laptop, and these are internal drives, but they're trying to be super cautious with this project.
---------- Post updated 02-07-17 at 06:49 AM ---------- Previous update was 02-06-17 at 06:40 PM ----------
I found what I was looking for, it looks like there is a way to do LUKS in-place conversion but it's not without risks.
Since this is a new system, I'm going to try to talk them into just encrypting partitions where the data will actually be stored, if not I'll just reinstall I guess.
9 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
NEED expertise help for this topic!!!
Question 1: Is encryption possible for the shell scriping programing? shadow the scriping file, do think is impossible...
Question2: built a simple program with the simplicity function that allow user change settings by enter corret name and... (3 Replies)
Discussion started by: trynew
3 Replies
2. UNIX for Dummies Questions & Answers
My dilemma,
I need to send, deemed confidential, information via e-mail (SMTP). This information is sitting as a file on AIX. Typically I can send this data as a e-mail attachment via what we term a "mail filter" using telnet. I now would like to somehow encrypt the data and send it to a e-mail... (1 Reply)
Discussion started by: hugow
1 Replies
3. Linux
Hi All,
In linux server some encryption keys were imported using gpg command.
I want to know when those keys was imported.
Is there any way to get when the encryption keys were imported?
Thanks in advance..
:rolleyes: (1 Reply)
Discussion started by: latika
1 Replies
4. Ubuntu
we are to develope a project on linux whose aim is to automatically encrypt files after logoff and to decrypt them using password after log in
this is to be made by chging source code of linux ...........
can any one help me on this???? (1 Reply)
Discussion started by: vyom
1 Replies
5. Cybersecurity
Hi all,
I am looking to encrypt a filesystem with a CentOS 6.4 install.
However I note that when using LUKS the system does not boot without prompting for the password encryption key.
I am looking for an drive/filesystem encryption solution which will allow reboots and shutdown/starts of the... (4 Replies)
Discussion started by: landossa
4 Replies
6. Cybersecurity
Hi all,
I'm looking for secure file encryption tools that use MAC address as encryption key. FYI, I'm using Red Hat Enterprise Linux OS.
For example: when A wants to send file to B
A will encrypt the file with B's computer MAC/IP address as an encryption key
This file can only be decrypted... (2 Replies)
Discussion started by: sergionicosta
2 Replies
7. Cybersecurity
Hello, you may know that linux root password can be resetted (example from rescue mode), so this means linux server offers no protection against access of data when you get somehow remote or physical access to server?
So my question is how i can full encrypt linux webserver disk so no one can... (1 Reply)
Discussion started by: postcd
1 Replies
8. Shell Programming and Scripting
Using awk or sed command how can i encrypt the characters for a particular column.For every character it should replace the third charter of alphabets.Example replace "A" with "C" and "B" with "D"..like this it should replace for all characters in particular column.
Using below command i am able... (3 Replies)
Discussion started by: katakamvivek
3 Replies
9. AIX
Hi guys:
I've been trying to find information about how to encrypt a backup to tape (I'm using a couple of simple commands: tar, find | backup), I didn't find a real example of how to do that, just a couple of white papers and information about the methods that use the backup,... (5 Replies)
Discussion started by: AixExplorer
5 Replies
PARTX(8) System Administration PARTX(8)
NAME
partx - tell the kernel about the presence and numbering of on-disk partitions
SYNOPSIS
partx [-a|-d|-P|-r|-s|-u] [-t type] [-n M:N] [-] disk
partx [-a|-d|-P|-r|-s|-u] [-t type] partition [disk]
DESCRIPTION
Given a device or disk-image, partx tries to parse the partition table and list its contents. It can also tell the kernel to add or remove
partitions from its bookkeeping.
The disk argument is optional when a partition argument is provided. To force scanning a partition as if it were a whole disk (for example
to list nested subpartitions), use the argument "-" (hyphen-minus). For example:
partx --show - /dev/sda3
This will see sda3 as a whole-disk rather than as a partition.
partx is not an fdisk program - adding and removing partitions does not change the disk, it just tells the kernel about the presence and
numbering of on-disk partitions.
OPTIONS
-a, --add
Add the specified partitions, or read the disk and add all partitions.
-b, --bytes
Print the SIZE column in bytes rather than in human-readable format.
-d, --delete
Delete the specified partitions or all partitions.
-g, --noheadings
Do not print a header line with --show or --raw.
-l, --list
List the partitions. Note that all numbers are in 512-byte sectors. This output format is DEPRECATED in favour of --show. Do not
use it in newly written scripts.
-n, --nr M:N
Specify the range of partitions. For backward compatibility also the format M-N is supported. The range may contain negative num-
bers, for example --nr -1:-1 means the last partition, and --nr -2:-1 means the last two partitions. Supported range specifications
are:
M Specifies just one partition (e.g. --nr 3).
M: Specifies the lower limit only (e.g. --nr 2:).
:N Specifies the upper limit only (e.g. --nr :4).
M:N Specifies the lower and upper limits (e.g. --nr 2:4).
-o, --output list
Define the output columns to use for --show, --pairs and --raw output. If no output arrangement is specified, then a default set is
used. Use --help to get list of all supported columns. This option cannot be combined with the --add, --delete, --update or --list
options.
-P, --pairs
List the partitions using the KEY="value" format.
-r, --raw
List the partitions using the raw output format.
-s, --show
List the partitions. The output columns can be selected and rearranged with the --output option. All numbers (except SIZE) are in
512-byte sectors.
-t, --type type
Specify the partition table type.
--list-types
List supported partition types and exit.
-u, --update
Update the specified partitions.
-S, --sector-size size
Overwrite default sector size.
-v, --verbose
Verbose mode.
-V, --version
Display version information and exit.
-h, --help
Display help text and exit.
EXAMPLES
partx --show /dev/sdb3
partx --show --nr 3 /dev/sdb
partx --show /dev/sdb3 /dev/sdb
All three commands list partition 3 of /dev/sdb.
partx --show - /dev/sdb3
Lists all subpartitions on /dev/sdb3 (the device is used as whole-disk).
partx -o START -g --nr 5 /dev/sdb
Prints the start sector of partition 5 on /dev/sdb without header.
partx -o SECTORS,SIZE /dev/sda5 /dev/sda
Lists the length in sectors and human-readable size of partition 5 on /dev/sda.
partx --add --nr 3:5 /dev/sdd
Adds all available partitions from 3 to 5 (inclusive) on /dev/sdd.
partx -d --nr :-1 /dev/sdd
Removes the last partition on /dev/sdd.
SEE ALSO
addpart(8), delpart(8), fdisk(8), parted(8), partprobe(8)
AUTHORS
Davidlohr Bueso <dave@gnu.org>
Karel Zak <kzak@redhat.com>
The original version was written by Andries E. Brouwer <aeb@cwi.nl>.
ENVIRONMENT
LIBBLKID_DEBUG=all
enables libblkid debug output.
AVAILABILITY
The partx command is part of the util-linux package and is available from Linux Kernel Archive <https://www.kernel.org/pub/linux/utils
/util-linux/>.
util-linux December 2014 PARTX(8)