Author Topic: Truecrypt PCLOS notes  (Read 973 times)

Offline Phil

  • Hero Member
  • *****
  • Posts: 743
Truecrypt PCLOS notes
« on: March 04, 2012, 07:47:51 AM »
Here are some notes for Truecrypt for PCLOS (note I have scoured the forum for these snippets). I found a good tutorial for a hidden encrypted partition, which easily translates into a hidden encrypted container file.

How to secure your sensitive data on another distro -PART 1- #18
(Start at 2:15, installation via synaptic special section for PCLOS)
How to secure your sensitive data on another distro -PART 1- #18


How to secure your sensitive data on another distro -PART 2- #19
How to secure your sensitive data on another distro -PART 2- #19 (Embedding disabled, limit reached)


Installation via synaptic on PCLOS:

It's been moved to the special section of the repositories. You have to add the word "special" to the section(s) line of the mirror you are using before you can see it.

PCLinuxOS is not set up to use sudo by default. Ergo, Tex moved truecrypt to the "special" section.


How to run:

Simply run truecrypt as root. "kdesu truecrypt" or "gksu truecrypt" ... works for me like a charm.  Just make sure you change the permissions of the truecrypt volumes to be your username, not root.


(Sudo issue may now be defunct)

It seems that people needed sudo to run truecrypt.

I've added this line to sudoers using visudo: %truecrypt ALL=(root) NOPASSWD:/usr/bin/truecrypt
I've also created a truecrypt group and added my account to the group.

change the following part of the system file /etc/sudoers with visudo
# User privilege specification
root   ALL=(ALL) ALL
%truecrypt ALL=(root) NOPASSWD:/usr/bin/truecrypt

To start it command sudo /usr/bin/truecrypt


Additional after playing with it:

sudo seems to be superfluous.

Start with kdesu truecrypt

GOTCHA - if you format a container with FAT rather than ext you cannot change file/directory permissions

The target mount point directory needs to have permissions changed to you rather than root (and maybe the truecrypt file as well)

More notes:

If you are using the hidden volume container, the outer volume is always formatted to FAT, and therefore on the system when mounted the outer volume will be in roots name, not the user. FAT does not do file permissions, so you cannot change from root once mounted.

To get around this mount using the GUI Mount > Options > Mount options:

umask=022,uid=501,gid=501

This will mount the outer FAT container as user 501, easy when you know how.

For the inner EXT3 volume it mounts and works normally as its linux (change the permissions on the target mount point and ok after that).



 
« Last Edit: April 10, 2012, 11:56:21 AM by Phil »