Questions tagged [ecryptfs]

eCryptfs (the Enterprise Cryptographic Filesystem) is a POSIX-compliant encrypted filesystem that has been part of the mainline Linux Kernel since version 2.6.19. It has been implemented as a stackable file system and provides filesystem-level encryption. eCryptfs has been derived from Erez Zadok's Cryptfs.

Filter by
Sorted by
Tagged with
16 votes
1 answer
10k views

what is difference between linux kernel subsystem dm-crypt and ecryptfs? [closed]

I was trying to read the source of ecryptfs in linux. Could anyone help me to explain the distinguish between linux kernel subsystem dm-crypt and ecryptfs. Is there any reference books that introduce ...
8 votes
2 answers
10k views

Securing data on SD card Raspberry Pi

I need to store sensitive data on Raspberry so that software running on Raspberry can use it, but nobody else cannot. I can set hard password, disable tty's and so on, but it's easy to remove SD card ...
7 votes
1 answer
9k views

How can I use transparent data encryption with MySQL?

I want to enable Transparent Data encryption (TDE) on MySQL. I don't mind if the entire db is encrypted (as opposed to a few columns or rows or tables). I am using this for a study, so I am looking ...
  • 1,475
5 votes
2 answers
673 views

Using direct IO with ecryptfs and similar stackable file systems

Does "ecryptfs" support direct I/O? In general, how can a "stackable" file system, that modifies buffer provided by user support direct I/O?
4 votes
2 answers
1k views

mount ecryptfs with syscall in C language

I am trying to mount an fs with ecryptfs in a program in C. But I don't manage to give to the kernel part the key int mount_crypt(char* source) { int r = -1; char opt[1024] = "ecryptfs_sig=...
  • 181
3 votes
1 answer
2k views

Mount encrypted home after ssh login permanently [closed]

I have set up an Ubuntu Server 14.04 with an encrypted home directory. The ssh public keys are outside the home directory so I can login after a restart, when the home directory is unmounted. I use ...
  • 47
3 votes
1 answer
2k views

How do I mount an encrypted /home directory with Linux Mint 18.3 KDE?

I decided to figure out how to recover data on a disk if the system does not start. It's better to do it before it happens;) Since there is no definitive correct answer for Linux Mint 18.3 KDE ...
  • 3,307
3 votes
1 answer
2k views

ecryptfs - How does the passwd utility update the hash for non-admin password changes?

I have been playing around with ecryptfs to manually mount/unmount a private store via ecryptfs-mount-private and ecryptfs-umount-private. When I'm logged in as a user with ecryptfs configured (ie: ...
  • 18.6k
3 votes
0 answers
254 views

How to use ssh-askpass in systemd and init.d at startup

I am encrypting a directory /opt/directory using ecryptfs. I want to create service using systemd and init.d that prompts the user for encryption password and mounts the directory. I have tried using ...
3 votes
1 answer
507 views

Does the linux kernel keyring store keys on disk? [closed]

I'm trying to learn a bit about the linux kernel keyring (as background for using ecryptfs). Does the kernel keyring store keys somewhere on disk, or does it get reinitiailized programmatically ...
  • 173
3 votes
0 answers
698 views

Error mounting eCryptfs: [-13] Permission denied - Amazon Linux AMI

I am trying to encrypt a directory somewhere in /home/balab/payload/bala/encrypt_data cd /home/balab/payload/bala from here i hit following command to encrypt sudo mount -t ...
  • 3,607
2 votes
1 answer
7k views

ecryptfs-mount-private is using login passphrase instead of mount passphrase on ubuntu 15.04

When I used ecryptfs-setup-private on ubuntu 15.04 I was asked for my login passphrase and to set a mount passphrase. ~$ ecryptfs-setup-private -f Enter your login passphrase [******]: Enter your ...
  • 1,214
2 votes
1 answer
2k views

Using ecryptfs inside Docker without --privileged. Appropriate value for --device?

I'm required to set up a Docker container inside which part of the filesystem is encrypted. Please let's not dwell on the why, the answer is ugly and more political than technical. In case it ...
2 votes
1 answer
2k views

Mount multiple directories using ecryptfs

I am using ecryptyfs to store some sensitive data in my PC (Debian wheezy). The data is in a partition and the partition is mounted automatically on bootup using /etc/fstab I have setup /root/....
  • 289
2 votes
2 answers
3k views

How do I mount/unlock my custom (!) ecryptfs directory on login?

I think I need to add a key from the user keyring to the kernel keyring on login for this, but let me just explain the whole thing: I have a custom ecryptfs directory set up with a huge annoying ...
  • 10.9k
2 votes
1 answer
1k views

seamlessly automount ecryptfs using ssh key auth? [closed]

Is there any way to automount ecryptfs mounts when logging in via ssh key and without additional user interaction? For example, is there any ssh extension that tells the client to decrypt some remote ...
1 vote
2 answers
490 views

How does this unique file header 'special marker' tell eCryptfs that it's an eCryptfs file?

I am writing a program (using Free Pascal, not C) that parses the header of eCryptfs files. One of the values in the header starts at byte 7 and ends at 15 (an 8 byte value). It is of use to me ...
1 vote
1 answer
722 views

How do I make ecryptfs automatically use my key?

I would like to programmatically mount a volume from my code and I am using the mount system call for that. I have ecryptfs installed. To manually mount a volume, I can use mount -t ecryptfs /src /...
1 vote
1 answer
2k views

How to mount remote ecryptfs directory?

I use rsync to synchronize the data on my client with a decrypted ecryptfs-container on the server. What I want to achieve is the following automatic process: If, on the server, keyctl show already ...
  • 33
1 vote
0 answers
198 views

Problems when mounting an Ecryptfs folder located on an NFS share

This project just keeps getting better So to describe the scenario, I have a Raspberry Pi that transmits Ecryptfs Keys to my home server from abroad. There are 2 USB keys required for decryption. ...
1 vote
0 answers
230 views

ecryptfs-migrate-home with domain user's home directory

Shortly, we have a windows AD Domain. We have lots of Ubuntu Clients with 18.04, currently, we want to encrypt those user's home directories. Our issue is when ecryptfs asks user's password even if ...
1 vote
1 answer
112 views

Recreate the .Private link in your home directory

Don't ask why but I did rm .Private in my home directory. It deleted the soft link /home/user/.private not the /home/.ecryptfs/user. I did ln -s .Private /home/.ecryptfs/yoram/.Private/home/....
user avatar
1 vote
2 answers
547 views

Decrypt and mount an eCryptFS encrypted directory using an external C++ script in Linux

I want to decrypt and mount the default eCryptfs private directory by executing the "ecryptfs-mount-private" terminal command in C++ and providing the passphrase/password from the same C++ script. I ...
0 votes
1 answer
643 views

How to do an aes encryption WITH a user password?

When softwares such as ecryptfs use AES, it asks for a user password (such as "password123"). The AES algorithm by itself does not call for a user password. So where does the "password123" get thrown ...
  • 3,120
0 votes
1 answer
157 views

Mounting ecryptfs using C++ mount function

I am trying to mount ecryptfs from within a C++ program. I can definitely mount it without it asking questions by issuing this command at the prompt: sudo mount -t ecryptfs -o "rw,key=passphrase:...
0 votes
2 answers
2k views

securely restoring an ecryptfs encrypted backup

I'm using ecryptfs to backup the entire contents of my Ubuntu box to an external hard drive enclosure. I've followed this guide and have things properly backing-up and encrypted as I want. That's ...
  • 2,183
0 votes
1 answer
161 views

Memory mapped files failing in ecryptfs directory

On a regular ubuntu machine, the following test succeeds unless I run it in my home directory, in which case it crashes with a bus error. All I can think of is that it's because the home directory is ...
  • 2,069
0 votes
1 answer
658 views

Plex Media Server And encFS

I'm trying to Spin Plex Media server in Docker. And I want to mass my media as a Volume, but encrypted. Flow: 1. Mount volume from external storage on underlaying host. 2. mount volume to docker ...
  • 233
0 votes
2 answers
169 views

Custom encryption Algo in Ecryptfs

has anyone used custom encryption algorithm(s) for encrypting data in ecryptfs? Custom Algorithm means any other crypto library/algorithm than standard kernel crypto APIs used by ecryptfs?
0 votes
2 answers
239 views

How to encrypt data while allowing r/w for given user in linux

I am currently working on a java search project that will be distributed to the clients' local server, the project contains some valuable data that we hope it cannot be accessed directly on the ...
  • 123
0 votes
0 answers
26 views

Mounting FS from Kernel

I am experimenting eCryptfs. It is quite good. I have encrypted one directory which is having some confidential data. I can view/edit this data by mounting it via ecrypts tools. While mounting it does ...
  • 145
0 votes
0 answers
389 views

Git "File name too long" after /home encryption with eCryptfs on Ubuntu

Basically after doing /home directory encryption with eCryptfs because of required security reasons of my client now when I tried to pull latest master I received such error: "filename" File name too ...
0 votes
2 answers
136 views

eCryptfs - same plain files generates different encrypted files

is there a way how to configure eCryptfs to produce same encrypted content for the same content of plain text files. I understand that could be a security risk, but I have a specific case. Example: ...
  • 63
0 votes
0 answers
287 views

Git: how does git push handle an encrypted folder when "push"

Scenario: using git to push to a remote repo. Local and remote are regular git repos, not encrypted. Putting a possible ecryptfs filesystem within a folder within the repo to be pushed. If: a git pre-...
  • 101
0 votes
1 answer
924 views

How to configure kernel to enable eCryptfs and Overlayfs filesystems in Ubuntu?

I'am trying to use privexec program in Ubuntu but according to http://www.onarlioglu.com/privexec/ site, they say that "Don't forget to enable ecryptfs and overlayfs support." at the 2. step of ...
0 votes
1 answer
164 views

Can a pam module modify the password typed by the user before it is seen by other modules?

Background: I have written a password generator that works as follows: Generate 130 random bits Interpret random bits as 26 elements of GF(32) Use the elements as coefficients to construct a 25th ...
  • 1,922
0 votes
1 answer
2k views

Upstart script to start eCryptfs encryption

I'm using eCryptfs to mount and encrypt a particular directory via: mount -t ecryptfs /secure /secure -o ecryptfs_unlink_sigs,ecryptfs_key_bytes=16,ecryptfs_cipher=aes I've seen examples that use ...
0 votes
2 answers
422 views

encrypt / decrypt a folder by ecryptfs for special user only

can i encrypt a folder and decrypt it only for special user by encrypts tools in Linux? in this case other users can not view files in decrypted folder. a way is using permissions to access folder but ...
0 votes
1 answer
963 views

decrypt a file only for specific process in linux automatically

I want to encrypt a folder by encfs or ecryptfs in linux. I can do it, but i want just specific process can access to it and decryption accrues automatically for that process. No key to encryption ...
-1 votes
1 answer
506 views

ecryptfs - relation of user entered passphrase to the FEKEK when mounting manually

I've been trying to set up encrypted folder following the instructions in https://wiki.archlinux.org/index.php/ECryptfs#Without_ecryptfs-utils. In that case a mount passphrase is manually created and ...
  • 1
-2 votes
1 answer
1k views

ecryptfs size different from home directory size [closed]

I'm puzzled. My harddisk is full and most of the space is used by .eryptfs/$MYUSERNAME (810.4 GB). Strangly, my home directory /home/MYUSERNAME (22.2GB) consumes significantly less diskspace. Any idea ...
  • 687