Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have a LAMP system running (of an SD card on small computer) that monitors some arbitrary data. I return the data as JSON from the page so that it can be used in whatever reason its fit for.

I would like to protect the PHP SOurce files and other code from prying eyes. I know that the root and user password MUST be very strong to prevent brute or lucky entry.

How would I prevent users from accessing any data within the Linux OS (/usr; /etc) when they take the SD card out and try and mount it or extract it on another system?

-EDIT

I found this for FreeBSD how can I configure it for Ubuntu?

share|improve this question
    
I would use LUKS, or use an actual server with a real hard disk. –  hexafraction Aug 14 '12 at 15:24
    
What benefit does a real hard disk give me? –  ppumkin Aug 14 '12 at 15:26
    
Harder to get at physically... Want to come down to chat? –  hexafraction Aug 14 '12 at 15:26
add comment

1 Answer

The best way and most difficult for any intruder is to use LVM and a separate USB key to store the key data for auto decryption.

This answer is very close to what I have asked

http://askubuntu.com/a/90911/37108

But there are other ways to achieve what I need without a separate USB key but pointed out that it is very easy to hijack grub and boot into root with full access.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.