Re: ecryptfs is unmaintained and untested

[Eric Biggers]

On Tue, Oct 14, 2025 at 09:31:13PM -0400, Theodore Ts'o wrote:
> On Tue, Oct 14, 2025 at 01:35:35PM -0700, Eric Biggers wrote:
> > I've been maintaining the 'fscrypt' userspace tool, and in the past I've
> > done quite a bit of work to improve it.  I also use it to encrypt the
> > home directory on my personal desktop.
> 
> Do you have integration with PAM?  I assume you must if you are
> encrypting your home directory, since there would need to have some
> way to insert the key to unlock your home directory as part of
> single-sign on.  Or are you only encrypting something like the Private
> directory on your home directory, and entering the password separately
> fromo the login password.
> 
> One of the really nice things of the ecryptfs integration, especialy
> on Ubuntu (and I don't remember if Tyler was responsible for that
> work; if so, kudos!) wasthat it was particularly eeamless.

Yes, there's a PAM module called pam_fscrypt.

- Eric