Re: Unusual LUKS setup

From	Zenaan Harkness <zenaan@freedbms.net>
Newsgroups	linux.debian.user
Subject	Re: Unusual LUKS setup
Date	2017-08-16 15:40 +0200
Message-ID	<uf6Ia-7Ci-9@gated-at.bofh.it> (permalink)
References	(1 earlier) <uekDw-2U0-11@gated-at.bofh.it> <ueoH8-5ij-11@gated-at.bofh.it> <uepaa-5HJ-9@gated-at.bofh.it> <uepWA-60G-69@gated-at.bofh.it> <uf1yN-4Ab-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Aug 16, 2017 at 09:48:23AM +0200, Bastien Durel wrote:
> Le lundi 14 août 2017 à 17:35 +0200, Nicolas George a écrit :
> > Le septidi 27 thermidor, an CCXXV, Bastien Durel a écrit :
> > > You don't. pam_mount will ask you for your password (after ssh
> > > authentication) if you didn't provided one
> > 
> > Thanks for the clarification. If you are right, then you probably
> > should
> > file a bug report for outdated documentation.
> > 
> > But still, "UsePrivilegeSeparation no" is a deal breaker on its own.
> > 
> > Regards,
> > 
> In my setup (openssh 7.5), there is no UsePrivilegeSeparation setting,
> it's on by default. And pam_mount is able to mount my encrypted
> partitions when I log via SSH.

If you need Goliath-OS compatible volumes, a year or so ago I managed
to script Veracrypt for a friend's "home" folder (forgotten what
that's even called on Windows sorry), and so they feel safe to be
able to 'upgrade' to any real operating system in the future.

Thread

Unusual LUKS setup Nicolas George <george@nsup.org> - 2017-08-14 11:50 +0200
  Re: Unusual LUKS setup Darac Marjal <mailinglist@darac.org.uk> - 2017-08-14 12:20 +0200
    Re: Unusual LUKS setup Nicolas George <george@nsup.org> - 2017-08-14 16:40 +0200
      Re: Unusual LUKS setup Bastien Durel <bastien@durel.org> - 2017-08-14 17:10 +0200
        Re: Unusual LUKS setup Nicolas George <george@nsup.org> - 2017-08-14 18:00 +0200
          Re: Unusual LUKS setup Bastien Durel <bastien@durel.org> - 2017-08-16 10:10 +0200
            Re: Unusual LUKS setup Zenaan Harkness <zenaan@freedbms.net> - 2017-08-16 15:40 +0200
  Re: Unusual LUKS setup <tomas@tuxteam.de> - 2017-08-14 12:30 +0200
    Re: Unusual LUKS setup tomas@tuxteam.de - 2017-08-14 16:40 +0200
      Re: Unusual LUKS setup Nicolas George <george@nsup.org> - 2017-08-14 18:10 +0200
        Re: Unusual LUKS setup tomas@tuxteam.de - 2017-08-14 21:30 +0200
      Re: Unusual LUKS setup Curt <curty@free.fr> - 2017-08-15 14:20 +0200
        Re: Unusual LUKS setup Zenaan Harkness <zenaan@freedbms.net> - 2017-08-15 17:30 +0200
          Re: Unusual LUKS setup <tomas@tuxteam.de> - 2017-08-15 21:10 +0200
            Re: Unusual LUKS setup Zenaan Harkness <zenaan@freedbms.net> - 2017-08-16 04:50 +0200
              Re: Unusual LUKS setup <tomas@tuxteam.de> - 2017-08-16 09:40 +0200
                Re: Unusual LUKS setup Zenaan Harkness <zenaan@freedbms.net> - 2017-08-16 15:30 +0200
        Re: Unusual LUKS setup <tomas@tuxteam.de> - 2017-08-15 21:00 +0200
          Re: Unusual LUKS setup Brian <ad44@cityscape.co.uk> - 2017-08-15 21:40 +0200
            Re: Unusual LUKS setup <tomas@tuxteam.de> - 2017-08-15 22:20 +0200
    Re: Unusual LUKS setup Nicolas George <george@nsup.org> - 2017-08-14 16:50 +0200

csiph-web