ecryptfs-setup-swap

ecryptfs-setup-swap [-f|--force] [device]

ecryptfs-setup-swap configures encrypted swap space using dm-crypt with a random key. This prevents sensitive data from being recoverable from swap after shutdown.The script modifies /etc/fstab and /etc/crypttab to enable encrypted swap on boot. A random key is generated each boot, so swap contents are unrecoverable after restart.Encrypted swap is important when using encrypted home directories, as unencrypted swap could leak decrypted data.

DEVICE

Swap partition to encrypt. If omitted, every active swap device is used.

Set up encrypted swap even if the device already looks encrypted.

Disables hibernation (swap content unrecoverable). Requires root privileges. Existing swap will be reformatted. Must run with system not using swap.

ecryptfs-setup-swap is part of the eCryptfs utilities, addressing the security gap where encrypted filesystem data could leak to unencrypted swap space.

ecryptfs-setup-private(1), ecryptfs(7), cryptsetup(8), swapon(8)

Source code · Homepage