Red Hat

Hi Gurus,

I have been working on encrypting a partition in a Fedora box and have successfully encrypted a partition(By name /test) using "cryptsetup & luks".

The below command was put up in a runcontrol file which is called during bootup to automount them during bootup.

Code:

cat /etc/rc5.d/S75my.luks
echo <password> | cryptsetup luksOpen /dev/sda8 test
mount -t ext3 /dev/mapper/test test

I have put the password in the startup file as i don't want to be prompted for a password everytime i boot up.

I understand that this methodology breaks the very purpose for which i have encrypted the partition. But this is a necessity as i am looking at putting this up for a new release and i don't want my customers to be prompted for a password and yet have the security of having an encrypted partition which cannot be decrypted if the Hard Disk is stolen.

1. Is there a way i can link this file to the hardware so that this script will run only if it the Hard disk is found in the same machine?(Something like checking against the serial number of motherboard)
2. Is there another way i can avoid prompting of password and yet ensure that Hard disk cannot be decrypted when stolen.





Note - I also understand that anybody who has a crack at the Hard disk can go into the runcontrol file and have a look at the logic. But I am short of better ideas and badly need some light. Please help.


Thanks
HG