umount.ecryptfs_private(1)

✨ umount.ecryptfs_private ✨

okay bestie, so this is the eCryptfs private unmount helper πŸ’– that's literally the NAME of the whole situation.


🌸 SYNOPSIS 🌸

umount.ecryptfs_private [-f]
⚠️ okay this is important so listen up: this program will not clear the relevant keys from the user's keyring. not even a little. and because of that, the recommendation is that you use ecryptfs-umount-private(1) instead, fr fr πŸ‘‘ that's the one you want, this is the one you're looking at.

πŸŽ€ OPTIONS πŸŽ€

here's everything you can throw at the umount.ecryptfs_private command:

  • -f β€” force the unmount, and just ignore the value of the mount counter in /tmp/ecryptfs-USERNAME-Private. like, who cares what the counter says, we're going πŸ’…

πŸ’… DESCRIPTION πŸ’…

umount.ecryptfs_private is a mount helper utility that lets non-root users unmount a cryptographically mounted private directory, ~/Private. no sudo required, we're doing this as ourselves 🫢

so here's the tea β€” if, and only if:

  • the private mount passphrase is in their kernel keyring, and
  • the current user owns both ~/.Private and ~/Private, and
  • ~/.Private is currently mounted on ~/Private, and
  • the mount counter is 0 (and ngl the counter is ignored if the -f option is used)

then this program will:

  • unmount ~/Private

and that's it. that's the whole move ✨

the only setuid operationis in this program are the call to umount and updating /etc/mtab.

the system administrator can add the pam_ecryptfs.so module to the PAM stack and automatically perform the unmount on logout. see pam_ecryptfs(8). yes it can just happen for you, iconic behavior honestly 🌈


πŸ¦‹ FILES πŸ¦‹

  • ~/.Private β€” underlying directory containing encrypted data πŸ”
  • ~/Private β€” mountpoint containing decrypted data (when mounted) πŸŽ€
  • ~/.ecryptfs/Private.sig β€” file containing signature of mountpoint passphrase
  • /tmp/ecryptfs-USERNAME-Private β€” file containing the mount counter, incremented on each mount, decremented on each unmount 🧚

πŸ’œ SEE ALSO πŸ’œ

ecryptfs(7), ecryptfs-setup-private(1), keyctl(1), mount(8), mount.ecryptfs_private(1), pam_ecryptfs(8)

/usr/share/doc/ecryptfs-utils/ecryptfs-faq.html

http://ecryptfs.org/


πŸ‘‘ AUTHOR πŸ‘‘

this manpage and the umount.ecryptfs_private utility was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others). permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation.

on Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.


okay that's the whole page bestie, sending you off with the deets: this is ecryptfs-utils, dated 2008-07-21, and the page you just read is umount.ecryptfs_private(1). slay, stay encrypted, unmount responsibly πŸ’–βœ¨πŸ¦‹