====== eCryptfs ======

Монтирование фифрованной папки:

<code>
LOGIN="User"
WRAPPED_FILE="/home/$LOGIN/.ecryptfs/wrapped-passphrase"

ecryptfs-unwrap-passphrase "$WRAPPED_FILE"

PASSPHRASE="77777a6817c633fd8db94ec61ac7777d"

printf "%s" "$PASSPHRASE" | ecryptfs-add-passphrase --fnek -
MOUNT_SIG_FILE="/home/.ecryptfs/$LOGIN/.ecryptfs/Private.sig"
ECRYPTFS_SIG="$(sed -n 1p $MOUNT_PASSPHRASE_SIG_FILE)"
ECRYPTFS_FNEK_SIG="$(sed -n 2p $MOUNT_PASSPHRASE_SIG_FILE)"
mount.ecryptfs "/home/.ecryptfs/$LOGIN/.Private" "/mnt" \
    -o ecryptfs_passthrough=n,\
    ecryptfs_cipher=aes,\
    ecryptfs_key_bytes=16,\
    ecryptfs_enable_filename_crypto=y,\
    ecryptfs_sig="$ECRYPTFS_SIG",\
    ecryptfs_fnek_sig="$ECRYPTFS_FNEK_SIG",\
    passphrase_passwd="$PASSPHRASE"
</code>

{{tag> Linux eCryptfs }}