Cryptmount允許你加密文件系統(tǒng)和交換空間,一個(gè)加密的文件系統(tǒng)能象一個(gè)正常的文件系統(tǒng)一樣存儲(chǔ)在一個(gè)塊設(shè)備上—例如,使用/dev/sda2—或者在另一個(gè)文件系統(tǒng)中的一個(gè)正常文件。后一種方法在你使用一個(gè)加密文件系統(tǒng)工作而不改變分區(qū)表或使用邏輯卷管理(LVM)時(shí)顯得特別順手。
Cryptmount設(shè)置是Linux內(nèi)核在設(shè)備映射層完成的,這就意味著你可以在加密設(shè)備映射塊文件上創(chuàng)建任意受支持的文件系統(tǒng)類型。Cryptmount處理設(shè)備映射加密并掛載文件系統(tǒng),Cryptmount的簡(jiǎn)單用法不需要你知道任何細(xì)節(jié)。
Cryptmount打包在Ubuntu Gutsy Universe中,在一些Slackware和Gentoo社區(qū)中也可下載,在Cryptmount的項(xiàng)目主頁(http://sourceforge.net/projects/cryptmount/)上也可以下載到RPM包。默認(rèn)情況下,cryptmount-setup傾向于在/home目錄下創(chuàng)建一個(gè)目錄用于存放加密內(nèi)容。
# cryptmount-setup
********************************
* cryptmount setup script
*
* This program will allow you to setup a secure filing-system that will
* be managed by "cryptmount". You will be able to select basic features
* such as the location and size of the filesystem - if you want more
* advanced features, you should consult the cryptmount manual page.
*
...
Please enter a target name for your filesystem
[opaque]: my-encrypted-files
Which user should own the filesystem (leave blank for root)
[]:
Please specify where "my-encrypted-files" should be mounted
[/home/crypt]:
Enter the filesystem size (in MB)
[64]: 256
Enter a filename for your encrypted container
[/home/crypto.fs]:
Enter a location for the keyfile
[/etc/cryptmount/my-encrypted-files.key]:
...
enter new password for target "my-encrypted-files":
confirm password:
Formatting encrypted filesystem...
enter password for target "my-encrypted-files":
Your new encrypted filesystem is now ready for use.
To access, try:
cryptmount my-encrypted-files
cd /home/crypt
After you have finished using the filesystem, try:
cd
cryptmount --unmount my-encrypted-files
# cryptmount my-encrypted-files
enter password for target "my-encrypted-files":
e2fsck 1.40.2 (12-Jul-2007)
/dev/mapper/my-encrypted-files: clean, 11/65536 files, 18561/262144 blocks
# df /home/crypt
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/mapper/my-encrypted-files
253871 10288 230476 5% /home/crypt
|
注意cryptmount --unmount消息,盡管Linux內(nèi)核會(huì)把/home/crypt看做另外一個(gè)文件系統(tǒng),但你仍然不能umount /home/crypt,因?yàn)镃ryptmount仍然認(rèn)為它是激活的,如果你那樣做了,內(nèi)核文件系統(tǒng)將不能卸載,但是Cryptmount可以讓你重新掛載它,并給你一個(gè)消息“create ioctl failed: Device or resource busy”。
| 共4頁: 1 [2] [3] [4] 下一頁 | ||||||
|


