Hi,
2013/12/12 Bruno Wolff III <bruno(a)wolff.to>
On Thu, Dec 12, 2013 at 15:17:33 +0000,
"Richard W.M. Jones" <rjones(a)redhat.com> wrote:
> On Wed, Dec 11, 2013 at 10:33:34PM +0100, Michał Piotrowski wrote:
>
>> The beauty of ecryptfs is that I can encrypt one dir - not whole file
>> system.
>>
>
> What's the concern with encrypting the whole filesystem? It's better
> for you because you leave significant personal information all over
> the disk, eg in log files in /var/log, in /etc files.
I'm aware of this, but I'm not so paranoid :)
Performance-
> wise it's not IMHO noticeable.
>
On a multi-user system one might be worried about some threats from other
users that might be mitigated by encrypting directories.
That was the use case when I started to use ecryptfs 4.5 years ago.
Currently I can use full disc encryption for my data.
--
Best regards,
Michal
http://eventhorizon.pl/