How to require bootup password for Puppy 5?

For discussions about security.
Message
Author
webstain
Posts: 4
Joined: Tue 25 May 2010, 16:24

How to require bootup password for Puppy 5?

#1 Post by webstain »

Hi guys

Currently using puppy 5.0 GREAT - the only hing is that I did not create a pwd for the first reboo and need to add one now for bootup.

Any help would be appreciated.

Regards to the team, great forum

Jean Marc

User avatar
Flash
Official Dog Handler
Posts: 13071
Joined: Wed 04 May 2005, 16:04
Location: Arizona USA

#2 Post by Flash »

How did you install Puppy? (Full install? Frugal? USB flash memory?)

Most computers nowadays have the option to require a password to boot the computer at all, no matter what the operating system. If available, this option is found in the computer's BIOS configuration. What exactly do you want to do, share a computer or just keep people from seeing what's on your computer?

webstain
Posts: 4
Joined: Tue 25 May 2010, 16:24

boot pwd

#3 Post by webstain »

Hello

It is a install on a USB harddrive that I am carrying around all the time and I do not want anybody having access to my info if they steal it from me and hook it up. So I need a pwd to protect my puppy session boot on that hard drive.

Thanks again for the help

Regards

Jean Marc

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#4 Post by Lobster »

Hi Jean Marc

Boot from the USB keydrive
when it says boot:
type p (you have 5 seconds)
then continue typing (you have unlimited time now) so you have:
puppy pfix=ram

Setup Puppy and save any data
Press Menu / Shutdown / reboot

Now it will offer to save your data and use encryption
Choose heavy encryption
During this process you will be prompted for a password

Don't forget your password
your data is encrypted and password protected
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

webstain
Posts: 4
Joined: Tue 25 May 2010, 16:24

#5 Post by webstain »

Thanks for the advice but maybe I did not express myself correctly

Puppy 5.0 is installed and running out of a USB Hard Drive and I am using it as my Portable OS/Computer where ever I go.

I did not chose to save the profile file with encryption at the first reboot but need to activate it now to protect that puppy volume

Thanks again for your help guys

Regards

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#6 Post by jamesbond »

If all you want is to have a boot-up password (ie, password asked when you boot your puppy from your portable harddisk), all you have to do is to edit your /etc/inittab so that it looks like this:

Code: Select all

::sysinit:/etc/rc.d/rc.sysinit
#tty1::respawn:/sbin/getty -n -l /bin/autologinroot 38400 tty1
tty1::respawn:/sbin/getty 38400 tty1
tty2::respawn:/sbin/getty 38400 tty2
tty3::respawn:/sbin/getty 38400 tty3
::ctrlaltdel:/sbin/reboot
Make sure you change the root's default password by running the "passwd" command before you reboot (if you forget, well, the default root password is "woofwoof").

Mind you, this only prevents people from *booting up* your puppy. It *does not* prevent people from looking at files in your harddisk. The only way to keep people from looking at your files is, to follow what Lobster said. And keep your sensitive files inside your encrypted save file, not outside it (ie, anything under /mnt/home is outside the savefile - it won't be protected).

EDIT: Let me clarify what I mean. If someone gets your harddisk, and plugs it in into any other working computer, all the contents would be immediately visible. They don't have to boot your puppy to see the contents. That's why the only solution is encrypted save file - as Lobster said.

cheers!
Last edited by jamesbond on Fri 28 May 2010, 02:52, edited 1 time in total.
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

User avatar
smokey01
Posts: 2813
Joined: Sat 30 Dec 2006, 23:15
Location: South Australia :-(
Contact:

#7 Post by smokey01 »

Folder Protection/Ecryption

I wonder If some smart person could get this working in puppy.

http://www.ubuntugeek.com/crypt-manager ... linux.html

or

http://code.google.com/p/crypt-manager/

Apparently three files are required they are:

1. conceal_0.0.5-0ubuntu1-all.deb
2. conceal_gtk-0.0.5-0ubuntu1-all.deb
3. nautilus-conceal_0.0.5-0ubuntu1-all.deb

I suppose file number 3. would need to be rewritten to work with ROX.

Unfortunately this needs python which is quite large.

I think this would be a very useful tool for many.

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#8 Post by jamesbond »

Sounds like a project. :D The conceal thing is only a GUI for encfs, here http://www.arg0.net/encfs. Encfs itself is very easy to build with minimal dependency, and we can do the GUI with a combination of gtkdialog and Xdialog to do the same thing.
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

2lss
Posts: 225
Joined: Sun 20 Sep 2009, 23:54

#9 Post by 2lss »

If your using grub as a bootloader you can set it up to prompt for a password.

http://ubuntuforums.org/showthread.php?t=7353

User avatar
smokey01
Posts: 2813
Joined: Sat 30 Dec 2006, 23:15
Location: South Australia :-(
Contact:

#10 Post by smokey01 »

I found something here that master_wrong was working on. Looks pretty good but has a couple of small bugs that need to be ironed out.

http://www.murga-linux.com/puppy/viewto ... 693#311693

p310don
Posts: 1492
Joined: Tue 19 May 2009, 23:11
Location: Brisbane, Australia

#11 Post by p310don »

haven't tried this, but can you remaster the puppy cd from what you have installed, then, making sure that remaster works and has all your info, there is an option to make sure all your personal stuff gets copied in dougal remaster, then format the portable harddrive and reinstall in set your save file to heavy encryption with a password a la lobster's method

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#12 Post by jamesbond »

Thanks smokey01 for the info - but I have a different idea of implementing it. Rather than having a central location to keep the list of encrypted directories (btw - this is the same approach taken by conceal-gtk as well), I would rather have an ability to encrypt/decrypt directories on demand.

cheers!
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

User avatar
Lobster
Official Crustacean
Posts: 15522
Joined: Wed 04 May 2005, 06:06
Location: Paradox Realm
Contact:

#13 Post by Lobster »

This directory encrypter has been coded and released
http://www.murga-linux.com/puppy/viewto ... 268#421268
Last edited by Lobster on Mon 31 May 2010, 02:34, edited 1 time in total.
Puppy Raspup 8.2Final 8)
Puppy Links Page http://www.smokey01.com/bruceb/puppy.html :D

User avatar
smokey01
Posts: 2813
Joined: Sat 30 Dec 2006, 23:15
Location: South Australia :-(
Contact:

#14 Post by smokey01 »

jamesbond wrote:Thanks smokey01 for the info - but I have a different idea of implementing it. Rather than having a central location to keep the list of encrypted directories (btw - this is the same approach taken by conceal-gtk as well), I would rather have an ability to encrypt/decrypt directories on demand.

cheers!
Cryptkeeper does let you encrypt directories on demand.

Regards

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#15 Post by jamesbond »

Yes, but that's not what I mean. Perhaps I don't say it clearly enough.

I would like to be able to go to any folder in Rox, right-click it, and choose "encrypt" from the popup menu. I will be asked for a password - and after that my folder will be encrypted. Similar functionalities for "open encrypted folder" and "close encrypted folder". Of course, once I'm tired with this stuff, I can always choose "decrypt" and remove all encryption, turning it back to a normal folder.

I've completed some scripts to do exactly that - I just need to clean it up and make it a little bit prettier. It depends only on EncFS (just like the conceal stuff) and Xdialog - a whooping 12K uncompressed :) no python stuff.

cheers!
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

User avatar
smokey01
Posts: 2813
Joined: Sat 30 Dec 2006, 23:15
Location: South Australia :-(
Contact:

#16 Post by smokey01 »

jamesbond wrote:Yes, but that's not what I mean. Perhaps I don't say it clearly enough.

I would like to be able to go to any folder in Rox, right-click it, and choose "encrypt" from the popup menu. I will be asked for a password - and after that my folder will be encrypted. Similar functionalities for "open encrypted folder" and "close encrypted folder". Of course, once I'm tired with this stuff, I can always choose "decrypt" and remove all encryption, turning it back to a normal folder.

I've completed some scripts to do exactly that - I just need to clean it up and make it a little bit prettier. It depends only on EncFS (just like the conceal stuff) and Xdialog - a whooping 12K uncompressed :) no python stuff.

cheers!
Ah, I see what you mean. If you try and encrypt an existing directory it will not allow it if it's not empty. You can create a directory and copy files to it though.

What you want is exactly what I want too. All this in 12k I'm looking forward to that.

I remember having something similar back in my DOS days it was very useful. It's nice to be able to keep private stuff away from prying eyes.

I'm not sure how much help I would be but am willing to assist if I can.

Regards

Smokey

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#17 Post by jamesbond »

No worries. You can help by pointing me to where I can find a working Boost C++ library pet (version 1.41 or older) for use with puppy (with the -DEV part - headers etc). Or you can build one :p

I'm more or less is done with the script, I just need to build the EncFS. This proves to be a challenge. (I have a running EncFS under Fatdog64 - but compiling under Quirky is more tricky).

I know master_wong has a compiled EncFS version 1.3.2, but I prefer to use the latest version (1.5.2 - this one was released in Sep 2008).

cheers!
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

User avatar
smokey01
Posts: 2813
Joined: Sat 30 Dec 2006, 23:15
Location: South Australia :-(
Contact:

#18 Post by smokey01 »

I have located Boost C++ version 1.41.

I'm not sure about the headers part but I could package it as a SFS file or PET as it is a 39M file.

I can then put it on my site for download at http://www.smokey01.com if you would like to try it.

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#19 Post by jamesbond »

No worries smokey, I've managed to compile it myself. It's only 850kb (huge compared to puppy, but compared to 39M is nothing ...). I've uploaded my work, see it here http://murga-linux.com/puppy/viewtopic.php?p=423144

cheers!
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

webstain
Posts: 4
Joined: Tue 25 May 2010, 16:24

puppy commands

#20 Post by webstain »

Hey guys

Thanks for the line of codes it worked perfectly, but to change the password how do I proceed (open terminal windows? what commands to type?)

Thanks guys

Regards

Jean Marc

Post Reply