Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5631 > unrolled thread

Two HDD on Desktop PC

Started byMostaf Faridi <mostafafaridi@gmail.com>
First post2019-08-04 22:00 +0200
Last post2019-08-05 11:30 +0200
Articles 15 — 10 participants

Back to article view | Back to linux.debian.security

Contents

  Two HDD on Desktop PC Mostaf Faridi <mostafafaridi@gmail.com> - 2019-08-04 22:00 +0200
    Re: Two HDD on Desktop PC GM1 <godminusone@godminusone.com> - 2019-08-04 22:10 +0200
      Re: Two HDD on Desktop PC Richard Owlett <rowlett@cloud85.net> - 2019-08-04 22:30 +0200
        Re: Two HDD on Desktop PC GM1 <godminusone@godminusone.com> - 2019-08-04 22:40 +0200
        Re: Two HDD on Desktop PC Joe <joe@jretrading.com> - 2019-08-04 23:10 +0200
        Re: Two HDD on Desktop PC Jonathan Hutchins <hutchins@tarcanfel.org> - 2019-08-04 23:30 +0200
          Re: Two HDD on Desktop PC Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2019-08-05 00:00 +0200
            Re: Two HDD on Desktop PC Vladislav Kurz <vladislav.kurz@webstep.net> - 2019-08-05 10:10 +0200
              Re: Two HDD on Desktop PC Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2019-08-05 10:20 +0200
            Re: Two HDD on Desktop PC Elmar Stellnberger <estellnb@gmail.com> - 2019-08-05 10:10 +0200
            Re: Two HDD on Desktop PC CMH <chouck@binghamton.edu> - 2019-08-05 13:10 +0200
              Re: Two HDD on Desktop PC Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2019-08-05 13:20 +0200
    Re: Two HDD on Desktop PC Vladislav Kurz <vladislav.kurz@webstep.net> - 2019-08-05 10:50 +0200
      Re: Two HDD on Desktop PC Vladislav Kurz <vladislav.kurz@webstep.net> - 2019-08-05 11:20 +0200
        Re: Two HDD on Desktop PC Andrei Grosu <andrei_grosu@fastmail.net> - 2019-08-05 11:30 +0200

#5631 — Two HDD on Desktop PC

FromMostaf Faridi <mostafafaridi@gmail.com>
Date2019-08-04 22:00 +0200
SubjectTwo HDD on Desktop PC
Message-ID<yruPE-3tN-9@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

I have Desktop PC with two HDDs . on first HDD, I have Debian 10 and on
Second HDD , I have Linux Mint.
File system on Debian is Ext4.
When I boot by linux mint I can access to files on Debian HDD.
I want this is not happen.
I want all my files can not accessing by other linux distro.
How I can config

MyWebSite http://mfaridi.com

[toc] | [next] | [standalone]

#5632

FromGM1 <godminusone@godminusone.com>
Date2019-08-04 22:10 +0200
Message-ID<yruZk-3MD-23@gated-at.bofh.it>
In reply to#5631
RTFM.  

You’d be better off encrypting both drives, then using your key to access data if you ever needed to.  

Google is your friend 
Aug 4, 2019, 3:51 PM by mostafafaridi@gmail.com:

> I have Desktop PC with two HDDs . on first HDD, I have Debian 10 and on Second HDD , I have Linux Mint.
> File system on Debian is Ext4.
> When I boot by linux mint I can access to files on Debian HDD. 
> I want this is not happen.
> I want all my files can not accessing by other linux distro.
> How I can config 
>
> MyWebSite > http://mfaridi.com <http://mfaridi.com>
>

[toc] | [prev] | [next] | [standalone]

#5633

FromRichard Owlett <rowlett@cloud85.net>
Date2019-08-04 22:30 +0200
Message-ID<yrviG-3Tw-9@gated-at.bofh.it>
In reply to#5632
On 08/04/2019 02:55 PM, *MORON* GM1 wrote:
> RTFM.

Could not be bothered giving useful reply

[toc] | [prev] | [next] | [standalone]

#5634

FromGM1 <godminusone@godminusone.com>
Date2019-08-04 22:40 +0200
Message-ID<yrvsl-3X7-17@gated-at.bofh.it>
In reply to#5633
You didn’t quote the whole message, CNN

Aug 4, 2019, 4:27 PM by rowlett@cloud85.net:

> On 08/04/2019 02:55 PM, *MORON* GM1 wrote:
>
>> RTFM.
>>
>
> Could not be bothered giving useful reply
>

[toc] | [prev] | [next] | [standalone]

#5635

FromJoe <joe@jretrading.com>
Date2019-08-04 23:10 +0200
Message-ID<yrvVn-4nt-3@gated-at.bofh.it>
In reply to#5633
On Sun, 4 Aug 2019 15:27:22 -0500
Richard Owlett <rowlett@cloud85.net> wrote:

> On 08/04/2019 02:55 PM, *MORON* GM1 wrote:
> > RTFM.  
> 
> Could not be bothered giving useful reply
> 
> 
> 

You don't think the advice about encryption was useful? I don't really
see any alternative, and a great deal of detail needs to be known to
offer more specific advice on encryption. And would you like to use an
encrypted system without fully understanding what was done?

-- 
Joe

[toc] | [prev] | [next] | [standalone]

#5636

FromJonathan Hutchins <hutchins@tarcanfel.org>
Date2019-08-04 23:30 +0200
Message-ID<yrweJ-4uu-1@gated-at.bofh.it>
In reply to#5633
On 2019-08-04 15:27, Richard Owlett wrote:
> On 08/04/2019 02:55 PM, *MORON* GM1 wrote:
>> RTFM.
> 
> Could not be bothered giving useful reply

Seriously, reading the documentation is a necessary recommendation.  It 
would have been useful to suggest WHAT documentation.  I think the 
suggestion of encryption, probably with different passwords, is the way 
to go.  Any attempt to "turn off" the other drive could be overridden.

It's not clear what you're actual goal is, whether it's security from 
malicious users or simple concern that one distro might "contaminate" 
the files on the other drive.  If it's the latter, your fears are 
misplaced, it's perfectly safe to have different distros, or even 
different OSs access the files.  People often use a different distro to 
"rescure" a damaged system.


-- 
Jonathan

[toc] | [prev] | [next] | [standalone]

#5637

FromRuslanas Gžibovskis <ruslanas@lpic.lt>
Date2019-08-05 00:00 +0200
Message-ID<yrwHL-4ET-7@gated-at.bofh.it>
In reply to#5636

[Multipart message — attachments visible in raw view] — view raw

1) Unmount deb partition on mint and remove it from /etc/fstab
2) If you just do not want to see it, run: find / -type f -delete
3) before booting into hdd 1 remove hdd2. Before booting hdd2 remove hdd1
4) install Windows or bubuntu on both hdd

[toc] | [prev] | [next] | [standalone]

#5638

FromVladislav Kurz <vladislav.kurz@webstep.net>
Date2019-08-05 10:10 +0200
Message-ID<yrGe6-2sC-3@gated-at.bofh.it>
In reply to#5637
On 04/08/2019 23:57, Ruslanas Gžibovskis wrote:
> 2) If you just do not want to see it, run: find / -type f -delete 

OMG, I thought that members of Debian community would not give this sort
of malicious advice. That command deletes everything.

Please be nice to each other.

-- 
Best Regards
        Vladislav Kurz

[toc] | [prev] | [next] | [standalone]

#5640

FromRuslanas Gžibovskis <ruslanas@lpic.lt>
Date2019-08-05 10:20 +0200
Message-ID<yrGnL-2vX-1@gated-at.bofh.it>
In reply to#5638

[Multipart message — attachments visible in raw view] — view raw

Sorry, yes, I should not write that, or mention about the consiquence.

But if files on another disk are not needed, not want to be seen ever, is a
good tool/way of removing files even if millions of files in the same dir.

As I understood that these files should not be there, from the initial
request.

On Mon, 5 Aug 2019 at 10:05, Vladislav Kurz <vladislav.kurz@webstep.net>
wrote:

> On 04/08/2019 23:57, Ruslanas Gžibovskis wrote:
> > 2) If you just do not want to see it, run: find / -type f -delete
>
> OMG, I thought that members of Debian community would not give this sort
> of malicious advice. That command deletes everything.
>
> Please be nice to each other.
>
> --
> Best Regards
>         Vladislav Kurz
>
>

-- 
Ruslanas Gžibovskis
+370 6030 7030

[toc] | [prev] | [next] | [standalone]

#5639

FromElmar Stellnberger <estellnb@gmail.com>
Date2019-08-05 10:10 +0200
Message-ID<yrGe6-2sC-13@gated-at.bofh.it>
In reply to#5637

[Multipart message — attachments visible in raw view] — view raw

I would not recommend find -delete as it deletes files.

You can easily remove/change a HDD if it is an USB adapter for an M.2 
drive. That is the most secure solution. If you want to be really secure 
you would need to take your computer offline and take the M.2 drive 
always with you.

Booting via USB3.0 does not work on all computers so you may need to 
boot via USB2.0. Precisely at the time when you have loaded the kernel 
you may however remove the drive physically from your USB2.0 plug and 
simply plug it into an USB3.0 slot.

Another solution I had for long with my desktop computer is to carry a 
SATA drive with me and have an external HDD dock. Of course you may also 
use an eSATA case for your HDD if you have an eSATA port.

Some hints on securing your computer can also be found at (see at the 
bottom):

https://www.elstel.org/CyberAttack-elstel.html.en


Am 04.08.19 um 23:57 schrieb Ruslanas Gžibovskis:
> 1) Unmount deb partition on mint and remove it from /etc/fstab
> 2) If you just do not want to see it, run: find / -type f -delete
> 3) before booting into hdd 1 remove hdd2. Before booting hdd2 remove hdd1
> 4) install Windows or bubuntu on both hdd
>
>
>

[toc] | [prev] | [next] | [standalone]

#5644

FromCMH <chouck@binghamton.edu>
Date2019-08-05 13:10 +0200
Message-ID<yrJ2i-4cn-5@gated-at.bofh.it>
In reply to#5637

[Multipart message — attachments visible in raw view] — view raw

Unless needed for physical security reasons I do not like to encrypt disks.
If the H/W fails you will recover nothing from the disk.

I presume each is a boot/root disk for the particular distro.
Just don't mount the 'other' disk, other being the distro you have not 
booted from.

Each disk should have a unique /etc/fstab

On 8/4/19 5:57 PM, Ruslanas Gžibovskis wrote:
> 1) Unmount deb partition on mint and remove it from /etc/fstab
> 2) If you just do not want to see it, run: find / -type f -delete
> 3) before booting into hdd 1 remove hdd2. Before booting hdd2 remove hdd1
> 4) install Windows or bubuntu on both hdd
>
>
>

-- 
Systems Since 1948
Craig M. Houck ><>
Tech Hub/Computer Center
    3rd Floor 332
      607 777 6827
We are only as good as the problems we solve!

[toc] | [prev] | [next] | [standalone]

#5645

FromRuslanas Gžibovskis <ruslanas@lpic.lt>
Date2019-08-05 13:20 +0200
Message-ID<yrJbY-4fE-17@gated-at.bofh.it>
In reply to#5644

[Multipart message — attachments visible in raw view] — view raw

And limit lvm conf in each os if using different lvm.kr if using lvm at all.

On Mon, 5 Aug 2019, 14:01 CMH, <chouck@binghamton.edu> wrote:

> Unless needed for physical security reasons I do not like to encrypt
> disks.
> If the H/W fails you will recover nothing from the disk.
>
> I presume each is a boot/root disk for the particular distro.
> Just don't mount the 'other' disk, other being the distro you have not
> booted from.
>
> Each disk should have a unique /etc/fstab
>
> On 8/4/19 5:57 PM, Ruslanas Gžibovskis wrote:
>
> 1) Unmount deb partition on mint and remove it from /etc/fstab
> 2) If you just do not want to see it, run: find / -type f -delete
> 3) before booting into hdd 1 remove hdd2. Before booting hdd2 remove hdd1
> 4) install Windows or bubuntu on both hdd
>
>
>
>
> --
> Systems Since 1948
> Craig M. Houck ><>
> Tech Hub/Computer Center
>    3rd Floor 332
>      607 777 6827
> We are only as good as the problems we solve!
>
>

[toc] | [prev] | [next] | [standalone]

#5641

FromVladislav Kurz <vladislav.kurz@webstep.net>
Date2019-08-05 10:50 +0200
Message-ID<yrGQN-2G2-7@gated-at.bofh.it>
In reply to#5631
On 04/08/2019 21:51, Mostaf Faridi wrote:
> I have Desktop PC with two HDDs . on first HDD, I have Debian 10 and on
> Second HDD , I have Linux Mint.
> File system on Debian is Ext4.
> When I boot by linux mint I can access to files on Debian HDD. 
> I want this is not happen.
> I want all my files can not accessing by other linux distro.
> How I can config 
> 
> MyWebSite http://mfaridi.com

Hello Mostaf,

there have been already some suggestions. But to find the right
solution, you have to say what level of isolation of those two systems
you need.

- is it just to prevent unprivileged users from accessing the other
drive? - then umount and removal from fstab is probably enough

- is it to prevent root from reading the other drive? - then you must
encrypt

- is it to prevent root from erasing the oter drive? - then you must
physically remove it each time

-- 
Best Regards
        Vladislav Kurz

[toc] | [prev] | [next] | [standalone]

#5642

FromVladislav Kurz <vladislav.kurz@webstep.net>
Date2019-08-05 11:20 +0200
Message-ID<yrHjQ-35y-5@gated-at.bofh.it>
In reply to#5641
On 05/08/2019 11:08, Mostaf Faridi wrote:
> Thanks for your reply
> Your guide is good.
> I want in linux mint Debian HDD can not mount and use it.
> I want linux mint can not mount Debian HDD.
> I want find way to config my debian system to prevent other OS can not
> mount Debian HDD.

In that case you have to encrypt both Debian and Mint drives, or
physically disconnect them.

-- 
Best Regards
        Vladislav Kurz

> 
> MyWebSite http://mfaridi.com
> 
> On Mon, 5 Aug 2019, 13:14 Vladislav Kurz, <vladislav.kurz@webstep.net
> <mailto:vladislav.kurz@webstep.net>> wrote:
> 
>     On 04/08/2019 21:51, Mostaf Faridi wrote:
>     > I have Desktop PC with two HDDs . on first HDD, I have Debian 10
>     and on
>     > Second HDD , I have Linux Mint.
>     > File system on Debian is Ext4.
>     > When I boot by linux mint I can access to files on Debian HDD. 
>     > I want this is not happen.
>     > I want all my files can not accessing by other linux distro.
>     > How I can config 
>     >
>     > MyWebSite http://mfaridi.com
> 
>     Hello Mostaf,
> 
>     there have been already some suggestions. But to find the right
>     solution, you have to say what level of isolation of those two systems
>     you need.
> 
>     - is it just to prevent unprivileged users from accessing the other
>     drive? - then umount and removal from fstab is probably enough
> 
>     - is it to prevent root from reading the other drive? - then you must
>     encrypt
> 
>     - is it to prevent root from erasing the oter drive? - then you must
>     physically remove it each time
> 
>     -- 
>     Best Regards
>             Vladislav Kurz
>

[toc] | [prev] | [next] | [standalone]

#5643

FromAndrei Grosu <andrei_grosu@fastmail.net>
Date2019-08-05 11:30 +0200
Message-ID<yrHtv-39a-3@gated-at.bofh.it>
In reply to#5642
unsubscribe ! 😭

Andrei Grosu
andrei_grosu@fastmail.net
+40722395956

> On 5 Aug 2019, at 12:14, Vladislav Kurz <vladislav.kurz@webstep.net> wrote:
> 
>> On 05/08/2019 11:08, Mostaf Faridi wrote:
>> Thanks for your reply
>> Your guide is good.
>> I want in linux mint Debian HDD can not mount and use it.
>> I want linux mint can not mount Debian HDD.
>> I want find way to config my debian system to prevent other OS can not
>> mount Debian HDD.
> 
> In that case you have to encrypt both Debian and Mint drives, or
> physically disconnect them.
> 
> -- 
> Best Regards
>        Vladislav Kurz
> 
>> 
>> MyWebSite http://mfaridi.com
>> 
>> On Mon, 5 Aug 2019, 13:14 Vladislav Kurz, <vladislav.kurz@webstep.net
>> <mailto:vladislav.kurz@webstep.net>> wrote:
>> 
>>>    On 04/08/2019 21:51, Mostaf Faridi wrote:
>>> I have Desktop PC with two HDDs . on first HDD, I have Debian 10
>>    and on
>>> Second HDD , I have Linux Mint.
>>> File system on Debian is Ext4.
>>> When I boot by linux mint I can access to files on Debian HDD. 
>>> I want this is not happen.
>>> I want all my files can not accessing by other linux distro.
>>> How I can config 
>>> 
>>> MyWebSite http://mfaridi.com
>> 
>>    Hello Mostaf,
>> 
>>    there have been already some suggestions. But to find the right
>>    solution, you have to say what level of isolation of those two systems
>>    you need.
>> 
>>    - is it just to prevent unprivileged users from accessing the other
>>    drive? - then umount and removal from fstab is probably enough
>> 
>>    - is it to prevent root from reading the other drive? - then you must
>>    encrypt
>> 
>>    - is it to prevent root from erasing the oter drive? - then you must
>>    physically remove it each time
>> 
>>    -- 
>>    Best Regards
>>            Vladislav Kurz
>> 
> 
>

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web