Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

When I login on my Ubuntu system a script will mount a truecrypt container. To decrypt the container I have of course to enter the decryption password. But Truecrypt also asks for my "administrator password". Why does Truecrypt ask for my administrator password and how can I disable this?

This is the script which runs on startup:

#!/bin/sh -e
/usr/bin/truecrypt /media/windows/data.tc /media/data
/usr/bin/dropbox start

/media/windows is a NTFS partition. /media/data is writable by the user.

share|improve this question

2 Answers

up vote 7 down vote accepted

TrueCrypt asks you for a password because mounting a filesystem requires superuser privileges. Do not circumvent it by allowing to run truecrypt as root without password, this is insecure as a malicious script can get elevated privileges by mounting a special-crafted container, and gain root privileges from it (e.g. setsuid binaries on in an ext2 filesystem or mounting on /).

share|improve this answer
Thanks for the answer. When I have enough rep, I will upvote. – i.amniels Oct 17 '11 at 21:52
1  
Not anyone can mount if his username is declared on visudo, only him will be able to use it without sudo password. – Bruno Pereira Oct 17 '11 at 21:56
1  
@brunopereira81: that's true, but it's still a security risk. I've updated the answer. – Lekensteyn Oct 17 '11 at 22:01
sounds great ;) – Bruno Pereira Oct 17 '11 at 22:05

Here is a quick fix you can use:

sudo visudo 

Add the line <yourusername> ALL=NOPASSWD: /usr/bin/truecrypt and save the file. truecrypt wont ask for your admin password anymore for . It quick and dirty, probably not safe, but works.

share|improve this answer
Thanks for the answer. When I have enough rep, I will upvote. – i.amniels Oct 17 '11 at 21:52
If it works im happy enough. gl and if needed ask ;) – Bruno Pereira Oct 17 '11 at 21:53

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.