Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I use truecrypt to encrypt one of my drives and I would want to leave the computer running processes that use information of that drive while I'm not home, I've tried suspending it but everything stops, I've also tried logging out but all processes are closed.

So is locking the computer (Ctrl+Alt+:L) the only possibility of achieving what I want?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

Is locking the computer (Ctrl+Alt+L) the only possibility of achieving what I want?

No. Services will still be active when you log out. So you could rewrite those processes to run as a service (if not already available). Or create a script that does what you want to do and include that as a service or crontab job.

I would expect the encryption to be re-actived when you log out(?)

Second: Is the lock screen secure enough to prevent "Mallory" from accessing the encrypted drive?

Well... nothing is secure if someone can physically access your machine. What is preventing someone to reboot the machine by cutting of the power and boot with a live cd and just format your disc?

To make things worse: there is probably a way to circumvent the lock screen. Also reported here. I have not seen a fix for debian/ubuntu so you might want to test if it is possible to do on your machine.

share|improve this answer
    
If that someone reboots the machine, the drives are encrypted so he won't be able to access the information, yes he can delete them, but he wouldn't know what has he deleted. But I managed as you said using the "daemon" of the application, so it works fine, thanks! –  Vndtta Apr 11 '13 at 13:52
    
Ofcourse. But you might be better of someone viewing it then to actually loose the files. QUESTION: do those processes use the encrypted partition? If not I might have a suggestion: use an encrypted usb stick. You can remove it when you go away from the system. –  Rinzwind Apr 11 '13 at 13:57
    
Yes, those processes use the encrypted partition –  Vndtta May 7 '13 at 13:35
add comment

It depends on technical knowledge of your adversary.

In theory nothing will help you if a violator has physical access to your computer and really wants to steal your data.

For example he can reboot your system in single user mode with root privileges.

You can disable single user mode but he can use live cd or a kind of hack to reset root password.

To protect from booting from live cd you can setup BIOS password (for boot and for settings access), but that also can be bypassed by CMOS data clearing and restoring default BIOS settings.

In addition your system can have running services listening some ports. They also can be vulnerable.

Then he can install special software he need, for example key logger for catching your password and accessing encrypted files/folders/drives.

So the more protection steps you did, the more difficult it can be to get access (more time and higher skills are required). But that is still not impossible.

You can hide your data (if not done yet) in addition to encryption.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.