I-EcryptFS, bhala ngokufihlakeleyo kwifolda yakho yomsebenzisi ku-Ubuntu

Kwinqaku elilandelayo siza kujonga kwi-EncryptFS. Abo bafuna indlela elula neyobubanzi yoku bhala ifolda yakho yomsebenzisi ku-Ubuntu Akukho mfuneko yokuba bajonge ngaphezulu kwe-EcryptFS. Xa iqulunqwe ngokufanelekileyo, abasebenzisi banokubhala ngokufihlakeleyo kwaye babethelele imfihlo yabo ngaphandle komzamo omkhulu.

Ukufaka esi sixhobo kunye nokusebenzisa kulula. I-EcryptFS igcina imethadatha ye-cryptographic metadata kwintloko yefayile nganye. Ifayile iya kuchithwa ngesitshixo esifanelekileyo kwi-Gnu / Linux kernel key ring. Akukho sidingo sokugcina naluphi na ulwazi olongezelelweyo ngaphandle kwale sele ikho kwifayile ebhaliweyo.

Faka i-EcryptFS

Ngaphambi kokuba siqale nayiphi na i-encryption, kuya kufuneka sifake isixhobo. Isebenza phantse kulo lonke ulwabiwo lweGnu / Linux. Ku-Ubuntu, singasifaka esi sixhobo ngokuvula i-terminal (Ctrl + Alt + T) kwaye uchwetheze kuyo:

sudo apt install ecryptfs-utils

Bethela ifolda yasekhaya

Ngexesha lenkqubo yokubhala ngokufihlakeleyo, siza kudala umsebenzisi wethutyana. Ekugqibeleni siya kuyisusa ngokupheleleyo. Iakhawunti yexeshana yomgcini obalulekileyo ibalulekile kuba akunakwenzeka ukubethela isikhombisi somsebenzisi ngelixa uqhagamshele.

Yenza umsebenzisi omtsha

Ukwenza umsebenzisi omtsha, siya kuvula i-terminal kwaye sichwetheze:

sudo -s

Ngoku iqokobhe liyingcambu, sisebenzisa umsebenzisi ukongeza ukwenza iakhawunti okwethutyana. Qiniseka ukuba yongeza -M ukuze inkqubo ingakhi umkhombandlela womsebenzisi omtsha.

useradd -M encriptacion-admin

I-Useradd iya kwenza umsebenzisi omtsha, kodwa ayinayo iphasiwedi. Kunye passwd, Siza kunika u-encryption-admin iphasiwedi entsha.

passwd encriptacion-admin

Umsebenzisi we-encryption-umsebenzisi ulungele ukusebenzisa, kodwa akayi kuba nako ukuphumeza imiyalelo yengcambu. Ukuvumela umsebenzisi ukuba enze le miyalelo, siya kuyidinga yongeza kwifayile yesudo. Sisebenzisa i-visudo, siya kuhlela ifayile yoqwalaselo. Ukwenza oku kwi-terminal (Ctrl + Alt + T) siya kubhala:

EDITOR=nano visudo

Ngaphakathi komhleli wombhalo weNano, siya skrolela ezantsi kwaye sifune «# Ukuchazwa kwelungelo lomsebenzisi«. Apha ngezantsi koku, kufuneka sibone «ingcambu ZONKE = (ZONKE: ZONKE) ZONKE«. Apha ngezantsi, siza kubhala oku kulandelayo:

encriptacion-admin ALL=(ALL:ALL) ALL

Konke oku. Gcina ifayile ye-visudo ngokucinezela u-Ctrl + O kwaye emva koko uvale nge-Ctrl + X.

Masiqale ngokufihla

Ukuqala inkqubo yokubethela, kuya kufuneka phuma kumsebenzisi esiceba ukuqala ukubethela. Kwiskrini sokungena ngemvume, siya kucinezela Ctrl + Alt + F1. Ukuba olu dibaniso alusebenzi, zama F2 ukuya ku-F6.

Chwetheza ukubethela-umlawuli (okanye igama lomsebenzisi olileleyo kwindawo yangaphambilikwi-Prompt yokungena. Emva koko siya kubhala iphasiwedi emiselweyo ngaphambili. Ngoku singasebenzisa i-EcryptFS ukuqala ukubethela.

Kulo myalelo ulandelayo, tshintsha «igama lakho lomsebenzisi»Ngegama leakhawunti yomsebenzisi apho ufuna ukwenza khona:

sudo ecryptfs-migrate-home –u tu-nombre-de-usuario

Lo myalelo ungasentla uza kufudusela umsebenzisi kwifolda ebhaliweyo yasekhaya, kwaye kungathatha ixesha ngokuxhomekeke kubungakanani bendawo oyinikele kule folda. Ngoku sinokuvala iseshoni yomsebenzisi wethutyana kwaye sibuyele kumsebenzisi oqhelekileyo.

Yongeza iphasiwedi yokubhala

I-EcryptFS phantse ilungele ukuya. Konke okuseleyo kunjalo setha iphasiwedi entsha. Vula isigxina, ngaphandle kokusebenzisa isudo okanye ingcambu kwaye uchwetheze lo myalelo ulandelayo:

ecryptfs-add-passphrase

Qaphela ukuba ukubethela akunantsingiselo ngaphandle kwephasiwedi eyomeleleyo. Ukufumana iphasiwedi ekhuselekileyo, unokufumana umdla ekuboneni inqaku esilipapashe kule blog malunga nalo Uyenza njani ipassword eyomeleleyo kwaye uzijonge kwisiphelo sendlela.

Xa "i-ecryptfs-add-passphrase" igqityiwe, ifolda yomsebenzisi kufuneka ibhalwe ngokupheleleyo. Ukuqala ukusebenzisa olu khuseleko, qala ikhompyuter yakho kwakhona. Emva kokuqalisa kwakhona, i-EcryptFS iya kusicela iphasiwedi yethu entsha ukuba singene ngokuchanekileyo.

Cima iakhawunti yomsebenzisi wethutyana

I-EcryptFS inyukile kwaye iyasebenza, ke lixesha lokufaka iakhawunti yethutyana ebesiyisebenzisa. Qala ngokususa kwifayile yesudo. Vula i-terminal (Ctrl + Alt + T) kunye nohlobo:

sudo -s

EDITOR=nano visudo

Skrolela kwifayile yesudo kwaye ususe ikhowudi eyongezwe ngaphambili.

encriptacion-admin ALL=(ALL:ALL) ALL

Gcina ifayile yesudo ngokucinezela u-Ctrl + O kwikhibhodi. Ngoku siza kuphuma kunye neCtrl + X.

Umsebenzisi we-encryption-admin akasenayo nayiphi na into yokufumana ukufikelela kwengcambu okanye ukuguqula inkqubo nangayiphi na indlela. Okwangoku, ayinabungozi, kwaye kunokwenzeka ukuba ushiye apha. Okwangoku, ukuba awunamdla wokuba nabasebenzisi abaninzi kwiqela lakho, kunokuba ngumbono olungileyo ukususa ngokupheleleyo. Kwisiphelo (Ctrl + Alt + T), Sebenzisa i-userdel ukuyalela ukuyisusa. Bhala kuyo:

sudo userdel encriptacion-admin

Ukuba umntu ufuna ukwazi okungakumbi ngesi sixhobo, banokudibana ne iwebhusayithi yeprojekthi.