News for hackers. Stuff that matters.
Re:Linux workstation security checklist by SmellyGeekBoy on Friday August 28, 2015 @10:05AM (#10135459)
It certainly makes sense from a security standpoint, but is there any additional overhead to encrypting swap? This is the first time I've ever seen it mentioned as a security measure.
Re:Linux workstation security checklist by ams6110 on Friday August 28, 2015 @03:34PM (#10137432)
Modern systems have enough ram that swap is not much used. If it becomes necessary, the overhead of encrypting will be the least of your concerns. If your system is swapping, it's crawling anyway.
Re:Linux workstation security checklist by Skunkleton on Friday August 28, 2015 @11:17AM (#10135887)
In theory anything could be in ram could also end up in swap. So yes, it is important. And yes, there is overhead, but it isn't too bad if your system isn't RAM constrained, and your CPU supports AES-NI or similar.
Re:Linux workstation security checklist by yellowapple on Friday August 28, 2015 @08:13PM (#10138467)
Ideally, you wouldn't even have a dedicated swap partition. No data is always more secure than even the most perfectly-encrypted data.

If you do have swap, though, then the encryption probably won't matter much compared to the fact that your machine is swapping in the first place.

Re:Linux workstation security checklist by vonuebelgarten on Friday August 28, 2015 @09:31PM (#10138632)
Hibernation is a very nice feature (I use it for laptop and desktop machines) and it requires a swap partition. Also, a encrypted swap is even more important in this scenario.

In the laptop I'm typing this, swap is one of the partions over a LVM2 physical volume over LUKS.

Re:Linux workstation security checklist by yellowapple on Monday August 31, 2015 @12:51PM (#10147698)
That's why I sad "ideally" :)