1

I want to backup the encrypted home of a user who might be logged in at backup time. Which directories should I backup if I want to ensure that absolutely no plaintext data can be leaked? Are the following folders always encrypted?

/home/user/.Private
/home/user/.ecryptfs

Just want to make sure that no data leaks, as the backup destination is untrustworthy.

Edit: Yes, as Lord of Time has suggested, I'd like to know which folders and/or files I need to backup if I need to store only encrypted content in a way that allows me to recover it later with the right passphrase.

2 Answers 2

1

From reading this by the author of ecryptfs, it sounds like you want to backup $HOME/.Private for each user.

0

They would only be encrypted if they were not mounted. As you soon as you mount them they are in a decrypted state and therefore plaintext is exposed. So the answer would be yes if your ecryptfs volumes are not mounted and no if they are.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .