[Bug 673028] Re: Ubiquity encrypted home doesn't setup encrypted swap

[Rolf Leggewie]

lucid has seen the end of its life and is no longer receiving any
updates. Marking the lucid task for this ticket as "Won't Fix".

** Changed in: user-setup (Ubuntu Lucid)
       Status: Confirmed => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to user-setup in Ubuntu.
https://bugs.launchpad.net/bugs/673028

Title:
  Ubiquity encrypted home doesn't setup encrypted swap

Status in ubiquity package in Ubuntu:
  Invalid
Status in user-setup package in Ubuntu:
  Fix Released
Status in ubiquity source package in Lucid:
  Invalid
Status in user-setup source package in Lucid:
  Won't Fix
Status in ubiquity source package in Maverick:
  Invalid
Status in user-setup source package in Maverick:
  Won't Fix
Status in ubiquity source package in Natty:
  Invalid
Status in user-setup source package in Natty:
  Fix Released
Status in ubiquity source package in Karmic:
  Invalid
Status in user-setup source package in Karmic:
  Won't Fix

Bug description:
  Binary package hint: ubiquity

  When encrypted home functionality was introduced in Ubiquity in the
  jaunty cycle, it was decided to wait until encrypted swap was also
  available before enabling it as encrypted home without encrypting the
  swap space is not secure. From the 1.11.10 changelog:

  * Disable the encrypted home option.  This cannot be considered secure
      without encrypted swap.  The option can still be enabled by preseeding
      it.

  During the karmic cycle, encrypted swap was added to the installer,
  and was enabled in the beta builds. Web pages were created that
  explained the lack of hibernation support when encrypted swap was
  used:

  http://blog.dustinkirkland.com/2009/06/migrating-to-encrypted-home-directory.html
  https://help.ubuntu.com/community/EncryptedHome

  Somewhere before Karmic was released, Ubiquity stopped setting up
  encrypted swap. As a result, Karmic, Lucid and Maverick have all
  shipped with the encrypted home option enabled, but with clear text
  swap space.

  This needs to be addressed as encrypted home alone isn't considered
  safe.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/673028/+subscriptions