0

I read somewhere that encrypted home directory using encryptfs is not offered as option anymore with latest release.

Can I use a guest account on system with full disk encryption?

  • 1
    What is your question/ problem? – Panther Aug 26 '18 at 18:23
  • OP seems to be referring to canonical discontinuing eCryptfs-Support (for encrypted home/user-folders) in favor of full disk encryption due to eCryptfs pakages not being actively maintained anymore – oliverjkb Aug 26 '18 at 19:06
  • 2
    Yes, but what does that have to do with the guest account? The guest account has no permanent home do I dont understand what either encryption option has to do with anything – Panther Aug 26 '18 at 19:12
  • Ah! I see. Your totally right! I confused the guest account with other user accounts. My bad. I'll update my answer to accommodate for that. – oliverjkb Aug 26 '18 at 19:17
  • 2
    If you use whole disc encryption, luks allows more than 1 password, so set a second temporary password to boot. There really is no way around access.redhat.com/solutions/230993. – Panther Aug 27 '18 at 12:51
4

TL;DR

If you use full disk encryption - which is the only option in the 18.04 installer - you will not be able to use 'Guest'-accounts without giving everybody your encryption key. This is true not only for 18.04, but for every release before, if you used full disk encryption.

Backgrounds:

For 18.04 Canonical decided to not offer eCryptfs anymore since the package is (or was) not actively maintained. Hence, securty issues and broken user experience could have a negative impact on the distribution itself, which clearly should not happen on an LTS release.

Also, in favor of better data protection, LUKS can be used to encrypt the whole disk. ecryptfs-utils however was moved to Universe Repo, so you can install it from there.

To answer your question:

If you still want to encrypt your users home directories (i.e. on multi user machines) you'd be better off not enabling encryption during installation and then install the ecryptfs-utils package later on to finally encrypt your user home directories.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.