RE: Encrypt parts of drive?

[Peter Lauri]

Hi,

How would this affect speed? I would only have customers data encrypted as
well as my own working directory where I keep all cvs etc. System parts
would be without encryption.

Best regards,
Peter Lauri

www.dwsasia.com - company web site
www.lauri.se - personal web site
www.carbonfree.org.uk - become Carbon Free

-----Original Message-----
From: [e-mail] [mailto:[e-mail]]
On Behalf Of Todd Zullinger
Sent: Tuesday, February 27, 2007 12:59 AM
To: [e-mail]
Subject: Re: Encrypt parts of drive?

Peter Lauri wrote:
> First, sorry for bugging you guys with questions. I am rather new,
> and I hope I can contribute later on with more experience.

Promise? :)
> Is there anyway to encrypt parts of a drive? For example: I need to
> encrypt a specific home directory /home/confidentialuser/ but not
> the rest of the drive, is that possible?

One way to do this is via fuse-encfs (yum install fuse-encfs).

See the examples in the man page.

There are other ways as well, using dm-crypt to create an encrypted
container.  It's been a while since I played with any of them, so
hopefully others can chime in with the pros and cons of various
methods.