Poldi, GPGME, and Auth Keys

[Meik Michalke]

Am Donnerstag, 20. November 2025, 11:44:42 CET schrieb Werner Koch:
> You should use the same token to encrypt your file system g13 with its
> dmcrypt backend is what you want.

that would encrypt the whole filesystem, wouldn't it? i don't want to give 
each user a full partition. instead, each user should be able to encrypt their 
own directory individually.

> However, if you prefer fscrypt, it is possible to support this also in g13.

that would be awesome.

> > fscrypt PAM module? at that point, it wouldn't even have to be the login
> 
> PAM and security does not work weel together ;-)

i mentioned PAM because gpg-auth does already provide a PAM mechanism. are 
there better alternatives to decrypt a users' own home directory automatically 
at login?


viele grüße :: m.eik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 265 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20251120/2f6e0050/attachment.sig>