Access-Your-Private-Data.desktop

wh33t · 09-01-2016, 02:32 PM

So after my success yesterday moving my webroot to /home/wh33t (https://www.linuxquestions.org/quest...ue-4175588469/)

I awake this morning to install Samba so I can use it as a file drop on my local network (that's not working yet, got a forum thread for that as well) and now my webserver is reporting to me the same error as before.

Code:

Forbidden

You don't have permission to access / on this server.

Not sure if setting up Samba at /home/wh33t/samba broke anything but perhaps it did.

So I start poking around I find this is my /home/wh33t/

Code:

wh33t@wh33tserv:~$ ls -l
total 0
lrwxrwxrwx 1 wh33t wh33t 56 Aug 31 03:03 Access-Your-Private-Data.desktop -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.desktop
lrwxrwxrwx 1 wh33t wh33t 52 Aug 31 03:03 README.txt -> /usr/share/ecryptfs-utils/ecryptfs-mount-private.txt

And when I check out that readme:

Code:

wh33t@wh33tserv:~$ cat README.txt
THIS DIRECTORY HAS BEEN UNMOUNTED TO PROTECT YOUR DATA.

From the graphical desktop, click on:
 "Access Your Private Data"

or

From the command line, run:
 ecryptfs-mount-private

So from what I can tell, it's unmounted my home directory. I want to know why it did that, and perhaps running an encrypted home directory is not the best place for webroot and sambaroot? The reason I put the webroot in my home directory was so that I could easily write files to it with my regular username, and it would be encrypted. I considered encrypting the whole machine, but it makes remote reboots very difficult.

Any tips? Always appreciated!

unSpawn · 09-01-2016, 06:34 PM

Quote:

Originally Posted by wh33t

I want to know why it did that, and

You used private directory encryption instead of say /home partition encryption so "because you chose to" is the answer ;-p

Quote:

Originally Posted by wh33t

perhaps running an encrypted home directory is not the best place for webroot and sambaroot?

Secure communication protocols (data in flight) and disk encryption (data at rest) are used for a purpose so align your method of encryption with your goals.

wh33t · 09-01-2016, 07:43 PM

Quote:

Originally Posted by unSpawn

You used private directory encryption instead of say /home partition encryption so "because you chose to" is the answer ;-p

Secure communication protocols (data in flight) and disk encryption (data at rest) are used for a purpose so align your method of encryption with your goals.

I did? In order to get home encryption I think I just checked a box during the installer. My goal was to have anything in my home directory to be encrypted. Where did I make the mix up?

unSpawn · 09-03-2016, 02:53 AM

No way to know: wasn't there when you configured your machine, but selecting whole disk or partition encryption is a task typically done when installing the OS. Home directory encryption options after OS install time are, depending on skills and available resources, more limited.