Mastering Linux Security and Hardening - Second Edition

Hands-on lab – encrypting other directories with eCryptfs

Encrypting other directories is a simple matter of mounting them with the ecryptfs filesystem:

1. Create a secrets directory in the top level of the filesystem, and encrypt it. Note how you list the directory name twice, because you also need to specify a mount point. Essentially, you're using the directory that you're mounting as its own mount point:

sudo mkdir /secretssudo mount -t ecryptfs /secrets /secrets

2. Enter your desired passphrase, and choose the encryption algorithm and the key length:

donnie@ubuntu2:~$ sudo mount -t ecryptfs /secrets /secrets[sudo] password for donnie:Passphrase:Select cipher: 1) aes: blocksize = 16; min keysize = 16; max keysize = 32 2) blowfish: blocksize ...