by Josh Kuo

Linux file system security options

analysis
Mar 15, 20072 mins

Maybe buying a FDE (Full Disk Encryption) hard drive is not an option for you right now, but that doesn't mean you need to compromise on your Linux file system security.linux.com has an article on how to hide an entire file system. There are several approaches mentioned in the article, such as using the loop-AES loop back device, or using package such as FUSE or eCryptfs (though these come with performance penal

Maybe buying a FDE (Full Disk Encryption) hard drive is not an option for you right now, but that doesn’t mean you need to compromise on your Linux file system security.

linux.com has an article on how to hide an entire file system. There are several approaches mentioned in the article, such as using the loop-AES loop back device, or using package such as FUSE or eCryptfs (though these come with performance penalties). Here is another site that provides a lot more options to just simply encrypt your file system the old fashioned way, including encrypting your home directory, using transparent cryptographic file systems, and also steganographic file systems.

There is something for the network file systems as well, you can use SSH File System, which is built-on FUSE, a userspace file system framework for Linux (so normal users can create and mount file systems without super-user privilege). The advantages of SSHFS is that it can be a easy and secure replacement for NFS or other network file system, although I would imagine the performance is not going to be as great due to the encryption.

ReiserFSv4 (sponsored by DARPA) also supports encryption, but it may not be included in your favorite Linux distribution yet, and you may need to manually patch your kernel.

Josh Kuo

Co-Owner of q!Bang Solutions

Mar 16, 2007