On Thu, Dec 12, 2013 at 15:17:33 +0000,
"Richard W.M. Jones" <rjones(a)redhat.com> wrote:
On Wed, Dec 11, 2013 at 10:33:34PM +0100, MichaĆ Piotrowski wrote:
> The beauty of ecryptfs is that I can encrypt one dir - not whole file
> system.
What's the concern with encrypting the whole filesystem? It's better
for you because you leave significant personal information all over
the disk, eg in log files in /var/log, in /etc files. Performance-
wise it's not IMHO noticeable.
On a multi-user system one might be worried about some threats from
other users that might be mitigated by encrypting directories.