Ubiquity installer allows encrypting home folder even if /home is already on an LUKS-encrypted partition
Bug #1307003 reported by
ejik
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
elementary OS |
New
|
Undecided
|
Unassigned | ||
ubiquity (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Ubiquity installer shows "Encrypt my home folder" checkbox that activates eCryptFS even if /home is already on an LUKS-encrypted partition, and it is unchecked by default. This is confusing and often results in the superfluous ecryptfs-over-LUKS setup for people opting for encryption. Instead, the checkbox should be either checked and made insensitive when /home is on a LUKS-encrypted partition.
Alternatively, showing a warning when trying to enable eCryptFS over LUKS is also an option.
To post a comment you must log in.
They are actually different things: LUKS is unlocked at boot, while eCryptFS is unlocked at login. In this way, the encrypted home folder is not accessible even from root account if the user isn't logged in.
But I agree, it may be confusing.