Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER ADMINISTRATION, Руководство по установке

Страница: 310 / 388

Chapter 29. Disk Encryption Guide
292
only on the device's LUKS UUID, and are therefore guaranteed to remain constant. This fact makes
them suitable for use in
/etc/fstab
.
Title
For details on the format of the
/etc/fstab
file, read the
fstab(5)
man page.
29.5. Common Post-Installation Tasks
The following sections are about common post-installation tasks.
29.5.1. Set a randomly generated key as an additional way to access
an encrypted block device
These sections are about generating keys and adding keys.
29.5.1.1. Generate a key
This will generate a 256-bit key in the file
$HOME/keyfile
.
dd if=/dev/urandom of=$HOME/keyfile bs=32 count=1
chmod 600 $HOME/keyfile
29.5.1.2. Add the key to an available keyslot on the encrypted device
cryptsetup luksAddKey <device> ~/keyfile
29.5.2. Add a new passphrase to an existing device
cryptsetup luksAddKey <device>
After being prompted for any one of the existing passprases for authentication, you will be prompted to
enter the new passphrase.
29.5.3. Remove a passphrase or key from a device
cryptsetup luksRemoveKey <device>
You will be prompted for the passphrase you wish to remove and then for any one of the remaining
passphrases for authentication.