Written by FiberOptix the 16 Mar 09 at 23:50.
Global category: Security.
New
The current advice for users wanting to implement full disk encryption post-install is:
1) Backup almost everything
2) Use the alternate installer
3) Update base system and kernel
4) Copy select files (like /boot, /etc/crypttab, etc.),
5) Overwrite new files with the old ones
6) Restore the select files from (4)
7) update-initramfs
This process is a pain and potentially catastrophic in several places. An automated tool to perform this task properly would be very helpful for many users who installed from the livecd and decide they want to use full disk encryption later on.
Written by JohnM_83 the 22 Mar 09 at 12:00.
Global category: Security.
New
Many users which includes me, use Ubuntu on their laptops. Most of notebooks are not equipped with fingerprint readers or other biometric login systems so the most common method of login is to type in login and password which could be problematic in public where everyone can see what we type on keyboard thus I propose a method for "advanced" password typing.
Written by diwic the 19 Mar 09 at 22:43.
Global category: Security.
New
Linux security is important, but often puts unnecessary restrictions for desktop/multimedia use. So I propose that a user can be granted/revoked a "multimedia" privilege.
Basically a user with this privilege has the ability to use the computer's resources (in particular, the CPU) in a non-cooperative fashion. This is needed in order to have low-latency audio, burn a DVD without underruns, watch a video without glitches etc.
Furthermore if this privilege was added, possibly some other groups and/or privileges could be skipped and instead included in this privilege (e g pulse-rt), making the system easier to configure without losing much power.
Written by firexq the 5 Mar 09 at 07:05.
Global category: Security.
New
The default encryption scheme in Ubuntu requires that I make a key and store it on a keyring to use... this is all well and good. However, there are times when a user will want to encrypt a file without the key being stored anywhere but his head. With the current system you need to have the decryption key saved, and even if you delete it afterwards, it's still theoretically recoverable.