0

This question already has an answer here:

In case there are two or more admins in ubuntu, can one admin prevent another admin from accessing his/her data ?

Regards.

marked as duplicate by Charles Green, waltinator, George Udosen, Fabby, karel Dec 30 '17 at 0:13

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • If both admins can run sudocommands and obtain root-rights .. NO. – Soren A Dec 29 '17 at 10:38
  • 3
    Create an encrypted partition for your personal files. – M. Dm. Dec 29 '17 at 11:00
  • How can I do that ? – lounice Dec 29 '17 at 11:24
  • askubuntu.com/questions/932191/… – derHugo Dec 29 '17 at 11:42
  • @M.Dm. that does not prevent this problem. Another admin can still access that data. – Rinzwind Dec 29 '17 at 12:23
1

No.

And anyone with physical access can change anything on a system. They do not even have to be an admin; they just need to be able to reboot.

The only way to prevent others to see your data is by storing it on another media (usb stick or on-line). And to lower the risk of exposure you always need to unmount whatever media the data is stored on.

Regarding encryption:

Another admin can view your data when you have the data visible in your system. Mounting an encrypted volume as "root" is not enough; another "root" user will be seen as owner of the data.

Someone that can reboot the system can also reset the password of an encrypted volume. Yes, you would know someone accessed it but ... the whole idea was to prevent access.

  • I am asking this because I am afraid that a team member (in a research lab) is trying to use my work without my permission and he insisted to have an admin account on my computer. This is a very difficult and stressful situation. I don't know what to do in order to protect my intellectual property (my work). I have a laptop, but I need the power of my office computer (GPU + CPU). – lounice Dec 29 '17 at 10:53
  • Keep your data away from that system when you are not on it. – Rinzwind Dec 29 '17 at 12:22
  • -1 This ignores encryption. – fkraiem Dec 29 '17 at 12:28
  • How can a user that can reboot the system change the key of the encrypted volume? If I give you a encrypted volume, you have no way of changing the key in any meaningful way. It will not protect a mounted volume, but it will protect data at rest. That said - I do fully agree with your conclusion... – vidarlo Dec 29 '17 at 12:57

Not the answer you're looking for? Browse other questions tagged or ask your own question.