Re: Issues with LUKS Password Management Options

[Arno Wagner <wagner@arnowagner.info>]

I do not disagree, but you are on the wrong mailing list here.
This is just for cryptetup (the CLI tool) and LUKS (the spec
and implementation), not for GUIs some other people have
written for it.

Regards,
Arno

On Fri, Oct 11, 2024 at 16:01:09 CEST, iam.frightful278@slmail.me wrote:
> i had the same response and request that Kiss istvan has...  im surprised
> the devs don't seem to be aware of this feature (maybe you's don't utilise
> any GUI at all for cryptsetup usage?...)
> 
> but for us GUI users, that when plug in a drive to the computer, we get
> the GUI with LUKS password box, under this there is the option to forget
> password immediately or til logout etc (as kiss described)..  and the
> default, IMO, 'should'/could be the 'forget password immediately'...  i
> also felt this, and wondered how i could change this feature...  as it
> take another few clicks to access my drives.
> 
> im running a linux mint machine, cinnamon desktop, if that helps. 
> 
> regards
> phil
> 
> Sent with Proton Mail secure email.
> 
> On Friday, October 11th, 2024 at 7:08 AM, Kiss István <keraform@gmail.com> wrote:
> 
> > Dear Developers,
> > 
> > I would like to bring to your attention an issue regarding the password
> > management of LUKS-encrypted volumes. Currently, the LUKS password
> > prompt offers three options for remembering the password, with the
> > default setting being to remember the password until logout. However, I
> > rarely turn off my computer, and I often keep it in standby mode for
> > weeks. As a result, the LUKS-encrypted volume remains unlocked for
> > extended periods, which is not ideal from a security perspective.
> > 
> > Every time, I have to manually ensure that the password is only stored
> > temporarily (forgotten immediately), which can be inconvenient and is
> > easy to overlook. I believe it would be helpful if users had the option
> > to set "forget the password immediately" as the default behavior,
> > perhaps through a simple checkbox, avoiding unnecessary compromises
> > between convenience and security.
> > 
> > I would like to ask if such a change is planned for the future or if you
> > have any suggestions on how this can be more efficiently handled with
> > the current system configuration.
> > 
> > Thank you for your attention, and I look forward to your response.
> > 
> > Best regards,
> > István Kiss
> >
> 

-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier