Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Fedora Workstation developers and those involved at Red Hat have been working to improve the state of disk encryption on Fedora with a end-goal of possibly making the installer encrypt systems by default. . While many Linux distributions allow for full-disk encryption these days, not many distributions enable it by default (Pop!_OS being among the rare that actively encourage it) while it looks like in the future Fedora Workstation could default to having its installer encrypt the disk. Owen Taylor of Red Hat laid out a mailing list post and Discourse thread today around the future of encryption with Fedora. With the encryption planning is also to have the encryption key stored in the system's Trusted Platform Module (TPM) and to also sign the bootloader/kernel/initrd with the TPM signatures. This work in turn is dependent upon the ongoing Unified Kernel Image support with Fedora and upstreams like systemd. The Fedora Workstation plan would be to use the upcoming Btrfs fscrypt support for encrypting both the system and home directories. The link for this article located at Phoronix is no longer available. . Ubuntu Desktop aims to bolster user privacy by implementing automatic disk encryption as a standard feature during setup for heightened security.. Fedora Workstation, Disk Encryption, Security Enhancement. . LinuxSecurity.com Team
Theo de Raadt has released OpenBSD 7.3 as the 54th release for this BSD operating system project. . OpenBSD 7.3 has tons of improvements from new hardware support to new kernel innovations and security improvements to various other updates. OpenBSD 7.3 is also notable for finally adding guided disk encryption to its installer. Downloads and for a complete list of the hundreds of changes making up OpenBSD 7.3 can be found via the official release announcement on OpenBSD.org . The link for this article located at Phoronix is no longer available. . OpenBSD 7.3 brings enhanced hardware compatibility, upgrades to the kernel, and offers an interactive disk encryption option in its setup process.. OpenBSD 7.3, Disk Encryption, AMD RDNA3, Security Innovations. . LinuxSecurity.com Team
The fall version of systemd is here, with support for increased boot security, including tightened full-disk encryption. . The 113th version has the usual long feature list of very specific, targeted elements outlined in the release announcement. However, as one might expect following recent events, several of the headline features relate to the new UKI fully signed boot process . UKI is short for "Unified Kernel Image" and combines the Linux kernel and initrd into a single file, along with some other smaller components, allowing the whole thing to be cryptographically signed. The purpose is to tighten up security on the Linux boot process. . Explore the major improvements in Systemd 252, focusing on boot security and enhanced disk encryption features.. systemd Features, Linux Disk Encryption, Boot Security Improvements. . LinuxSecurity.com Team
Most Linux distros are currently coming up short from offering adequate security around full disk encryption and authenticated boot. Prominent Linux developer Lennart Poettering even argues that your data is "probably more secure if stored on current ChromeOS, Android, Windows or macOS devices." . Lead systemd developer Lennart Poettering wrote a lengthy blog post today around the state of authenticated boot and disk encryption on Linux. While many Linux distributions offer full-disk encryption, offer UEFI SecureBoot, and begun embracing TPMs, many of the technologies aren't being used to their best potential yet especially now by default / out-of-the-box. Lennart's short summary of the situation is: Linux has been supporting Full Disk Encryption (FDE) and technologies such as UEFI SecureBoot and TPMs for a long time. However, the way they are set up by most distributions is not as secure as they should be, and in some ways quite frankly weird. In fact, right now, your data is probably more secure if stored on current ChromeOS, Android, Windows or MacOS devices, than it is on typical Linux distributions. The link for this article located at Phoronix is no longer available. . Lennart Poettering brings attention to vulnerabilities in Linux disk encryption and secure boot processes, urging for improvements.. Linux Disk Encryption, Authenticated Boot, Security Shortcomings, Data Protection, Lennart Poettering. . Brittany Day
This ComputerCurrents article discusses the features in PGP (Pretty Good Privacy) encryption software, including email, file, and disk encryption. . . . . This ComputerCurrents article discusses the features in PGP (Pretty Good Privacy) encryption software, including email, file, and disk encryption. The link for this article located at ComputerCurrents is no longer available. . PGP (Pretty Good Privacy) encryption secures data with robust features for emails, files, and disks, ensuring confidentiality, integrity, and user-friendly management. PGP Encryption,Data Security,Privacy Software. . LinuxSecurity.com Team
Full disk encryption provides incredible data protection for personal devices. If you haven’t enabled FileVault on your Mac, Windows Device Encryption on your PC, or Android Device Encryption on your phone, please go do it now (iOS encrypts storage by default). It’s easy, efficient, and secure. You will likely never notice the difference in usage or performance. Seriously. This is a no-brainer. . Once enabled, device encryption prevents just about anyone from accessing device data. Unless a malefactor possesses both device and authentication credentials, the data is secure. Mostly. The link for this article located at Just a Theory - David E. Wheeler is no longer available. . Once enabled, device encryption prevents just about anyone from accessing device data. Unless a male. encryption, provides, incredible, protection, personal, devices, haven’t. . LinuxSecurity.com Team
This article will describe how to encrypt entire partition with a Cryptoloop. Cryptoloop is a disk encryption module for Linux. It was first introduced in the 2.5.x kernel series. . Cryptoloop has an ability to create an encrypted file system on a single partition or within a regular file, which can later simply be mounted by the mount command. Cryptoloop uses so called loopback device, which needs to be called with any file system request. Currently there are many alternatives for Cryptoloop usage and the most common is Loop-AES. This article will explain a simple usage of the cryptoloop module for partition encryption and mounting within a Linux Operating system. The link for this article located at Linuxcareer is no longer available. . Discover the process of safely encrypting a Linux partition with Cryptoloop to enhance your data security.. Disk Encryption,Cryptoloop,Filesystem Security,Encrypted Partition,Data Protection. . LinuxSecurity.com Team
The open source TrueCrypt disk encryption tool is considered the to be the software of choice for systematically encrypting data. It is able to encrypt individual drives, such as USB Flash drives, and even entire hard drives. A small utility called TCHead is, however, able to tackle data encrypted using TrueCrypt.. The link for this article located at H Security is no longer available. . The link for this article located at H Security is no longer available.. source, truecrypt, encryption, considered, software, choice. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.