A user comes to you and explains that she needs some form of encrypted le system to store sensitive information on a Flash drive. The Flash drive will be used to transport the sensitive data between work and home and she is worried about loosing the drive and having the data stolen. Both machines, the one at home and the one at work, use the same Linux OS.
She has the following requirements:
She does not want to encrypt individual les as she has to deal with a large number of les.
She wants it to be as transparent as possible.
She thinks she will only need about 64MB at most.
She wants to also use the ash disk for transporting unencrypted les. Files that can be read on machines apart from her work and home machines.
A 64MB le that contains an encrypted le system, stored on the Flash drive would appear to be ideal|
a. Create a 64MB encrypted le system in a leon a Flash drive so that it can be used with the cryptmount command.
Document and explain in your own words every command you use (plus any command line options) and any con guration les you modify or create. Your descriptions of each operation need to show you understand the purpose of the operation.
Note: If you are uncertain why a particular command or command line option is required|ask! There is at least one step and command line option that you cannot understand from the information in the man page alone! It will require some research!
b. Things you must also address and explain:
how to ensure that the Flash drive has exactly the same mount point each time it is used on di erent machines. If it does not have the same mount point then how do you con gure cryptmount paths? Hint: Experiment with \labelled" le-systems (see the command e2label or dosfslabel) or UUIDs in conjunction with the le /etc/fstab how to manage the le-system encryption keys.
c. Write an instruction sheet for the user so that she can make the modi cations to her home machine so that she can access the le on the ash drive containing the encrypted le system. Also explain how she would use the lesystem in her day-to-day work.
You may assume that she has root access to be able to con gure her home machine to mount an encrypted le-system.
a. Do not use the tool cryptmount-setup or the tool installed by the package cryptsetup.
b. Manually create les and con guration les.
c. Follow the steps outlined in the cryptmount man page| explaining the purpose of every step!
d. List all resources used in answering the question.
e. Do not explain how you installed the cryptmount package|it should already be installed on the Virtual Debian.