You are not logged in.

#1 2019-05-03 06:39:03

linux_user
Member
Registered: 2016-11-04
Posts: 338

Linux installation completely accessible from USB live stick.

If I boot into a live USB stick and navigate to the desktop hdd in which the primary BL is installed, I am able to access every file in it - including the home folder. I can open, rename, cut/copy or delete these files.

What have I done wrong? Permissions?


"Blind faith to authority is the greatest enemy of truth."

Offline

#2 2019-05-03 07:53:56

damo
....moderator....
Registered: 2015-08-20
Posts: 4,878

Re: Linux installation completely accessible from USB live stick.

linux_user wrote:

...
What have I done wrong? Permissions?

Nothing AFAIK. You have physical access to a linux machine - the main vulnerability.

If you can't access files then you can't fix eg boot problems.


Be Excellent to Each Other...

FORUM RULES and posting guidelines «» Help page for forum post formatting
Artwork on DeviantArt  «» BunsenLabs on DeviantArt

Offline

#3 2019-05-05 02:27:13

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 5,229
Website

Re: Linux installation completely accessible from USB live stick.

You can access Windows files with any Linux live USB too.


John
--------------------
( a boring Japan blog , Japan Links, idle twitterings  and GitStuff )
In case you forget, the rules.

Online

#4 2019-05-05 05:26:17

linux_user
Member
Registered: 2016-11-04
Posts: 338

Re: Linux installation completely accessible from USB live stick.

johnraff wrote:

You can access Windows files with any Linux live USB too.

Oh yes, I've done that quite a number times often feeling great about the power of Linux. smile But, the last time I tried, Win 10 files weren't accessible, especially the user folder. It threw up some permission error. I assumed that Windows fixed it and became 'more secure'.

johnraff wrote:

Nothing AFAIK. You have physical access to a Linux machine - the main vulnerability.

A shocker to me. I thought there were some permission issues from my side in the light of Win 10 fix.

Can we not fix this by using encrypted LVM during installation, at least the home folder? I can't try it and find out at the moment since I have only 1 system at the moment and I can't experiment on it at the moment.


"Blind faith to authority is the greatest enemy of truth."

Offline

#5 2019-05-05 08:56:49

ohnonot
...again
Registered: 2015-09-29
Posts: 3,673
Website

Re: Linux installation completely accessible from USB live stick.

linux_user wrote:

A shocker to me. (...)

Can we not fix this by using encrypted LVM during installation, at least the home folder?

I don't see that there's anything to fix:

  • Some people don't find it necessary to encrypt a machine that lives inside their secure homes. Remember we're talking about physical access, not from the internet.

  • Those that do always have the option to do that during install. The option is there AFAIK.

Offline

#6 2019-05-06 03:39:47

johnraff
nullglob
From: Nagoya, Japan
Registered: 2015-09-09
Posts: 5,229
Website

Re: Linux installation completely accessible from USB live stick.

linux_user wrote:
johnraff wrote:

You can access Windows files with any Linux live USB too.

Oh yes, I've done that quite a number times often feeling great about the power of Linux. smile But, the last time I tried, Win 10 files weren't accessible, especially the user folder. It threw up some permission error. I assumed that Windows fixed it and became 'more secure'.

A few weeks ago I helped a friend recover some files from a Win 7 system with no problem. I wonder what Win 10 could have done to deny a Linux system permission to read files?
Sounds a bit odd...


John
--------------------
( a boring Japan blog , Japan Links, idle twitterings  and GitStuff )
In case you forget, the rules.

Online

#7 2019-05-06 04:03:26

linux_user
Member
Registered: 2016-11-04
Posts: 338

Re: Linux installation completely accessible from USB live stick.

^ I remember that I wasn't able to access the user folder (home folder) of a win10 system in my office few years back. Not sure why. Could be some additional security.

Anyway, I'll try again when I get my hands on a win10 system.

ohnonot wrote:

Those that do always have the option to do that during install. The option is there AFAIK.

By 'fix', I meant 'protection to folders during physical access to the system'. And, encrypting during installation is surely the fix or workaround I wanted to confirm. Thank you. smile

Last edited by linux_user (2019-05-06 04:07:48)


"Blind faith to authority is the greatest enemy of truth."

Offline

Board footer

Powered by FluxBB