3

A regular user is unable to mount a VeraCrypt volume without first authenticating with an administrator password. According to the original TrueCrypt documentation, the workaround is to give the user sudo privileges on the veracrypt directory.

Edit visudo and add USERNAME ALL = (root) NOPASSWD:/usr/bin/veracrypt

Source = Method 2 here

This is insecure and opens up doors for vulnerabilities at the root level.

Source: Is it secure to mount VeraCrypt without sudo password in this way | Security SE

How can a regular user safely mount a VeraCrypt container without needing the administrator password or having sudo privileges?

Or is it actually safe to add the above to visudo?

  • I don’t believe it’s possible to safely allow non-root users to mount veracrypt containers without changing the way that veracrypt mounts filesystems. – Steve May 17 '18 at 4:27
  • I have not been able to find a solution. Files are secure in the Veracrypt container, but using the recommended procedure to allow users to mount the volume makes the entire device vulnerable. Seems to defeat the purpose. I'm determined to find a way to do this safely. – slatica Jul 29 '18 at 15:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.