[Novalug] Filesystem encryption thoughts

[Mark Smith]

you can, of course argue that position.  i might have done the same
thing 10 years ago.  i'm more pragmatic now.

in fact, /tmp and /var/log are better candidates than movies and
pictures in my humble opinion.

i'm actually a little surprised that MAC (multi-level) protections
didn't take hold any better.  i did a lot of work on that a few
years ago.  that kind of protection might have done a better job
at protecting without the overhead of encryption.

it all depends upon what the data is.

On Wed, Aug 01, 2007 at 05:23:26AM +0000, Paul M. wrote:
> I would argue that you should be encrypting everything. Some things,
> like /tmp and /var/log, should be encrypted too.
> -Paul
> 
> On 8/1/07, Mark Smith <mark at winksmith.com> wrote:
> > On Tue, Jul 31, 2007 at 11:22:34AM -0400, Mike H wrote:
> > > I wanted to know ppl's experiences with filesystem encryption on linux: good
> > > and bad.  I am looking into encrypting my swap partition and my home
> > > partition, but not my root partition on my brand new laptop.  However, I am
> > > concerned about increased data transfer latency.  Will my multimedia files
> > > i.e. movies and music be laggy when played back from an encrypted partition?
> >
> > movies/music probably don't need to be encrypted.  have you considered
> > partitioning your data into needing security v.s. not needing
> > security?

-- 
Mark Smith
mark at winksmith.com
mark at tux dot org
nova-instructor at tux dot org