Re: install on a X200, ubuntu windows7 but password protected

On 18 October 2020 14:03:01 CEST, Joerg Bruehe <[email protected]> wrote:
>Hi Uwe, all!
>
>On 17.10.20 17:29, Uwe Brauer wrote:
>>
>> Hi
>>
>> This might be a bit off topic. I was asked to install Ubuntu on a
>X200
>> (which runs windows 7!). However not only should it be a dual boot
>(that
>> I know to do of course), but the booting of windows should be
>password
>> protected.
>>
>> So this seems to be a grub question, I presume, anybody has done
>this?
>
>I have never dealt with boot passwords, and I fail to see the real
>gain:
>If an attacker gets hold of the machine, s/he can easily boot a live
>system and then mount any partition of any internal disk.
>
>IMNSHO, the only real protection is disk encryption - for Linux with
>LUKS, for Windows with Veracrypt. Veracrypt is also available for
>Linux,
>so Linux can mount the encrypted Windows partition(s).
>
>...

>I have successfully used the 2016 articles to encrypt a Windows system
>on a Thinkpad (forgot the model), dual-boot with Linux using LUKS.
>
>The anti-virus project Desinfec't can also handle Windows systems which
>
>are encrypted using Veracrypt.

While I haven't used Veracrypt, Windows Bitlocker should also work. It can be setup to ask for a password on boot. Also, Linux can read and write using either dislocker or the newest cryptsetup, which I have not tested yet. I am using dislocker successfully to read and write to a bitlocker NTFS partition.

Regards
Matthias
-- 
The linux-thinkpad mailing list home page is at:
http://mailman.linux-thinkpad.org/mailman/listinfo/linux-thinkpad