Hide folder in linux
-
@Dashrender said in Hide folder in linux:
@scottalanmiller it's usually a misunderstanding - they think they are getting security out of it - kinda the out of sight out of mind idea.
Sadly the really bad guys don't fall for this - you need real security.
Hidden folder would ne fiind by accident. People would just find them.
-
@Lakshmana said in Hide folder in linux:
@scottalanmiller to hide personal folders hidden from other people
What? Just chmod go-r it… -
@Francesco-Provino said in Hide folder in linux:
@Lakshmana said in Hide folder in linux:
@scottalanmiller to hide personal folders hidden from other people
What? Just chmod go-r it…Hiding folders: people have to "look" for your data, but it is all there.
Security ACLs: People see your folders but can't see or access what is in them. -
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
-
Just to reiterate. Hidden files/directories begin with a period (~/.bashrc). They are "hidden" from normal view so if you type
lsorls -lthey won't appear. But if you typels -lathen they are no longer hidden. It's not a security mechanism, it's just to keep things tidy. If you really want to secure something you'll need to change the mode:chmod 0600 lakshmana:lakshmana fileOr set an ACL
setfacl -m o::- fileIf it's a directory and you want default ACLs you will have to set the default and then apply the ACL.
setfacl -dm o::- dir/ setfacl -m o::- dir/ -
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
Gnome has Seahorse built in so you can also use PGP (GPG) keys but I haven't been able to get the Nautilus integration to play nicely. So you can create a PGP key in Seahorse (it will take a little while to have enough entropy and then it will show up) and then encrypt a file with:
gpg --output <file.gpg> --encrypt --recipient [email protected] <original-file>Then decrypt with
gpg --output <file-to-save-as> --decrypt <file.gpg> -
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
-
@scottalanmiller said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
Sure. I suggested encryption because it - depending on the type of encryption (loopback/partiton vs encrypted files) - brings also some obfuscation, for example in backups which are outside of what OP may control.
-
@stacksofplates said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
Gnome has Seahorse built in so you can also use PGP (GPG) keys but I haven't been able to get the Nautilus integration to play nicely. So you can create a PGP key in Seahorse (it will take a little while to have enough entropy and then it will show up) and then encrypt a file with:
gpg --output <file.gpg> --encrypt --recipient [email protected] <original-file>Then decrypt with
gpg --output <file-to-save-as> --decrypt <file.gpg>I'm not much into *NIX desktop environments. Good to know.
-
@thwr said in Hide folder in linux:
@stacksofplates said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
Gnome has Seahorse built in so you can also use PGP (GPG) keys but I haven't been able to get the Nautilus integration to play nicely. So you can create a PGP key in Seahorse (it will take a little while to have enough entropy and then it will show up) and then encrypt a file with:
gpg --output <file.gpg> --encrypt --recipient [email protected] <original-file>Then decrypt with
gpg --output <file-to-save-as> --decrypt <file.gpg>I'm not much into *NIX desktop environments. Good to know.
Ya you're supposed to be able to right click and hit unencrypt or something like that and have it prompt for the password. I haven't been able to get that functionality to work but Seahorse holds PHP keys, SSH keys, passwords, etc. It's not bad.
-
@scottalanmiller said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
Sure but encryption can act as a type of ACL.
-
@stacksofplates said in Hide folder in linux:
@scottalanmiller said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
Sure but encryption can act as a type of ACL.
Kind of, a shared password kind of ACL.
-
@scottalanmiller said in Hide folder in linux:
@stacksofplates said in Hide folder in linux:
@scottalanmiller said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
Sure but encryption can act as a type of ACL.
Kind of, a shared password kind of ACL.
Sure. Same as group based ACLs. But it's only shared if someone else has your password.
-
@stacksofplates said in Hide folder in linux:
@scottalanmiller said in Hide folder in linux:
@stacksofplates said in Hide folder in linux:
@scottalanmiller said in Hide folder in linux:
@thwr said in Hide folder in linux:
Either use ACLs/Permissions or encrypt your data. You could use an encrypted loopback device (~"image file") for example, but this requires some background knowledge about the underlying technology.
ACLs are to prevent other users accessing files. Encryption is to stop thieves who steal the drives from accessing them.
Sure but encryption can act as a type of ACL.
Kind of, a shared password kind of ACL.
Sure. Same as group based ACLs. But it's only shared if someone else has your password.
Not really a list unless you do
