Hi,

2013/12/12 Bruno Wolff III <bruno@wolff.to>
On Thu, Dec 12, 2013 at 15:17:33 +0000,
  "Richard W.M. Jones" <rjones@redhat.com> wrote:
On Wed, Dec 11, 2013 at 10:33:34PM +0100, Micha³ Piotrowski wrote:
The beauty of ecryptfs is that I can encrypt one dir - not whole file
system.

What's the concern with encrypting the whole filesystem?  It's better
for you because you leave significant personal information all over
the disk, eg in log files in /var/log, in /etc files.

I'm aware of this, but I'm not so paranoid :)
 
Performance-
wise it's not IMHO noticeable.

On a multi-user system one might be worried about some threats from other users that might be mitigated by encrypting directories.

That was the use case when I started to use ecryptfs 4.5 years ago. Currently I can use full disc encryption for my data.
 



--
Best regards,
Michal

http://eventhorizon.pl/