[Tfug] A question on encrypted home directories...

[Matt Eskes]

basically, the password has nothing to do with your password in ubuntu
since your ecryptfs key is wrapped and then effectively sync'd with your
password, UNLESS you go into single user, in which case you'd have to
run the wrapper script to rewrap your key (sorry, I know the process but
not where everything is located since I don't encrypt myself) Dustin
Kirkland gave a really interesting interview in which he explained the
process.

Matt

-----Original Message-----
From: Zack Williams <zdwzdw at gmail.com>
Reply-to: Tucson Free Unix Group <tfug at tfug.org>
To: Tucson Free Unix Group <tfug at tfug.org>
Subject: Re: [Tfug] A question on encrypted home directories...
Date: Sat, 6 Mar 2010 11:59:09 -0700

On Sat, Mar 6, 2010 at 10:21 AM, Jim March <1.jim.march at gmail.com> wrote:
> Folks,
>
> I've rebuilt my system as 32bit using Linux Mint - had an app I had to
> run that doesn't work in 64bit (long story).
>
> To improve performance I avoided whole disk encryption and gone with
> an encrypted /home.
>
> Here's my question, and it's possibly a stupid one: in Ubuntu it's
> laughably easy to reset one's user password.  Right?  All you do is go
> into recovery mode, reset the password.
>
> Can I safely assume that will have no effect on the key to the
> /home/jim directory?!?

Here's a pretty complete rundown of how it works:

http://www.linux-mag.com/id/7568/1/

I'm not sure how ubuntu keeps track of saved passwords.  If it's well
designed, changing an unknown account password won't cause other
passwords to be revealed.

 - Zack

_______________________________________________
Tucson Free Unix Group - tfug at tfug.org
Subscription Options:
http://www.tfug.org/mailman/listinfo/tfug_tfug.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://tfug.org/pipermail/tfug_tfug.org/attachments/20100307/f92e8ce8/attachment.asc>