Welcome to Server Circle. It's a friendly site and all levels of experience are welcome. Be aware that we use cookies for your login.
Server Circle - Ask questions about Servers and get answers from experts.
Beta (0.79 sec)
Newbie Ubuntu install advice please - encrypt or not ?

Should I encrypt home directories on servers ?

I wonder if just making the directories non-world readable might be fine for a few logins on our servers ?

I use: ls -ld /home/username

and

chmod 0750 /home/username

Is that pretty secure from other users ?
Asked by:
TomPating
1355 points
 Report Abuse
 Share Page - Category: Ubuntu Linux - Tags: Newbie Ubuntu install advice please - encrypt or not ?
 Enter your response
Please use Pastie.org to paste lengthy code or to fix formatting issues with code
  • Responses in reverse (4)

Best Answer

It depends on what you want users to do. If you want to prevent other users from seeing what a user has in their home directory, chmod 0700 would do the trick.

If you want the user to be able to have web pages in their home directory, consider chmod 0701.

This doesn't prevent the root user from seeing what is inside the user's directory. Encryption is only a requirement if you only want the user to be able to see their files, it may put a burden on the server though.

Response by:
jfc3
95 points
"Thank you. What is the difference between 700 and 701 ?"

700 gives the owner permission to read, write and execute the file, whilst denying access to everyone else. 701 allows others to execute files (but denies others read and write privileges). For more information visit this site: http://ss64.com/bash/chmod.html

Response by:
Bashi
80 points
If we assume you are happy with the logical security for a second (chmod et al), consider some other events...

a) your system is hosed and you want to backup the system from another linux install...

encryption makes this rather difficult much of the time, however if you backup regularly then it is far less of an issue.

b) the system may be physically stolen...

encryption stops the unauthorised access of your data in this event, but it may mean your access may be made more difficult in the normal case

c) the encryption starts to error, if it uses a single container file, then all you files are likely gone, if it encrypts each file individually who knows...

The use (or non use) of encryption should be justified, don't just do it for no reason.

Response by:
darkflib
95 points
Thank you. What is the difference between 700 and 701 ?

Response by:
TomPating
1355 points


  • Related Questions
About Us : Contact Us : Etiquette : Terms : CDN Failover : ShorterURL : CDN Fallback : © 2013 Server Circle