Securing my disk

[lucid]

Perhaps there is another section for this, if that is so then feel free to move it.

Ok, so I have a few questions. Linux answers only please.

1 - Is there a good way to perform full system encryption without formatting the whole damn computer, or reinstalling?

2 - If no, is there a way to encrypt directories such as:

/tmp
/var/tmp
/var/logs
/var/cache/apt

without damaging them or damaging my system?

3 - If no, is there a way to mount them as tmpfs or something. I edited my /etc/fstab and mounted all of these as tmpfs and when I rebooted my system wouldn't start up. How do I avoid this?

4 - Is there any other directories where temporary/partial/sensitive info would be stored besides the aforementioned directories?

Thanks a bunch.

[ande]

One word my friend. TrueCrypt. http://www.truecrypt.org/

You can either make an encrypted container and put all your stuff in there or you can encrypt the entire drive WITHOUT re-installing anything. You can even add hidden OS's n shit depending ont he password you enter at bootup

[lucid]

Are you sure you can encrypt the entire drive in truecrypt? I think you can only do that in windows. I've tried to encrypt the entire drive and it said that it doesn't support encrypting system... well, here's the error:

Code: [Select]

Error: You are trying to encrypt a system partition.

TrueCrypt can encrypt system partitions only under Windows.

Plus, how do you get it to encrypt say /tmp without formatting the directory?
Also, thanks for the fast response. 

[ande]

Are you sure you can encrypt the entire drive in truecrypt? I think you can only do that in windows. I've tried to encrypt the entire drive and it said that it doesn't support encrypting system... well, here's the error:

Code: [Select]

Error: You are trying to encrypt a system partition.

TrueCrypt can encrypt system partitions only under Windows.

Plus, how do you get it to encrypt say /tmp without formatting the directory?
Also, thanks for the fast response. 

Hmm, that's odd. Sucks..

TrueCrypt dosent encrypt folders, you make a "container" and mount it as a folder. Then that mounted folder is encrypted.

[SoftwareDeveloper]

I use Fedora, it has RealCrypt (TrueCrypt) and it is works! -RPMFusion needed to add to source-
I do not know it is available to your OS or no but i think why not.
Fedora contains LUKS what encrypts the partitions and when you want to mount you have to give your LUKS password.  You can be configure this when you installing the OS.
-LUKS also available to version 14 and up-
Did I help you?