pam_ecryptfs(8)

πŸ’– pam_ecryptfs β€” bestie's guide to the eCryptfs PAM module πŸ’–

okay so this is the pam_ecryptfs(8) page, straight out of the Linux-PAM Manual. grab a strawberry πŸ“ and let's get into it.


✨ NAME ✨

pam_ecryptfs β€” the PAM module for eCryptfs πŸŽ€


πŸ¦‹ SYNOPSIS πŸ¦‹

pam_ecryptfs.so [unwrap]

that's it. that's the whole vibe. one optional argument, no notes. πŸ’…


🌸 DESCRIPTION 🌸

so pam_ecryptfs is a PAM module, right, and what it does is genuinely iconic: it takes your login password and uses it to unwrap an ecryptfs mount passphrase that's chillin' in ~/.ecryptfs/wrapped-passphrase, and then it automatically mounts a private cryptographic directory. no cap. πŸ”₯

like, you log in, and your secret lil encrypted corner of the filesystem just… shows up. main character energy fr fr. πŸ‘‘


✨ OPTIONS ✨

  • unwrap β€” use the login passphrase to unwrap an eCryptfs mount passphrase. that's the one, that's the option, she's the moment. 🫢

πŸŽ€ MODULE SERVICES PROVIDED πŸŽ€

the services auth and session are supported. just those two, bestie. periodt. πŸ’œ


🌈 EXAMPLES 🌈

ok so picture this: you wanna unwrap a mount passphrase and automatically mount a private directory on login. you're gonna add these lines to these files. let's go. 🧚

/etc/pam.d/common-auth:

auth    required        pam_ecryptfs.so unwrap

/etc/pam.d/common-session:

session optional        pam_ecryptfs.so unwrap

that's the whole setup. slay. ✨


πŸ’… SEE ALSO πŸ’…

go read the faq, iykyk. πŸ“š


πŸ‘‘ AUTHOR πŸ‘‘

this manpage was written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others). permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation. 🫢

on Debian and Ubuntu systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. go look, it's right there bestie πŸ’–

mwah, that's the whole page β€” brought to you by the Linux-PAM Manual, dated 2008-07-21, and filed under pam_ecryptfs(8). take care of your wrapped passphrases and drink some water. πŸ’œπŸ¦‹