Encrypt mail folder

[linkfan]

Hi all!

I have a question. Is there any possibility to encrypt mail folder? So root user cannot access and read mails? This should be on the fly... Can u help me?

Regards linkfan

[slaughter]

We must know what type of mail folder you're talking about. The system mail folder, or something from another mail program like Evolution?

[previso]

This may help:
Linux: How to Encrypt and decrypt files with a password
I suppose the principle of a folder as a file applies.

[linkfan]

Hi!

Thanks for reply. I was thinking about system mail folder /var/spool/mail/

Regard Linkfan

[tkb2766]

Hi all!
...
So root user cannot access and read mails?
...
Regards linkfan

If you do not trust the root user not to go snooping in your inbox, then you have bigger fish to fry. The root user has access to your e-mail before it hits your inbox. If you encrypt your /var/spool/mail folder (i don't even know if that is possible), then the root user will simply place a copy of your e-mail elsewhere before delivering to your inbox - that's what sendmail milters can be used for. The emails can then be read at the root user's leisure and distributed to others if they prove to be funny or can incriminate you if he/she happens not to like you!

You've got to remember that the user who has access to the root account has to be of trustworthy nature to begin with. If you can't trust him/her, then simply fire them and get someone you can trust or learn how to and do it yourself!

My A$0.02,
tkb.

[linkfan]

Hi!

Thanks for reply... There is no other way? I don't wan't to be fired... :P

Regard Linkfan

[AkeS]

Why not use a net server mail?

[bclark4444]

Technical side: A couple options could be:
1) get an external account ( hotmail, gmail, yahoo, etc ) for the communications.

2) If both you and the sender want a private secured communication, then the message itself could be encrypted ( pgp or gpg (open source alternative) ). With this method then it doesnt really matter as much if root sees it because (s)he would not be able to decrypt and read it.

Ethical side: I know you arent asking for this, but if these emails could get you fired then you are obviously violating your companies policies. That being said, the company rightfully owns the computer and anything that is on it from a legal standpoint. Im thinking the external account may be your best option since that is much closer to being "your own personal account".

--Brett

[previso]

The US Supreme Court has ruled that ANYTHING that goes through a company's property (phones, computer systems, internal mail) is the property of the company for your use in the company's behalf. (ie, they own the emails that go through their servers).
And the employee should not expect any measure of privacy.
Use your cellphone texting, or an external email account, as suggested above. Yahoo email can send, receive text messages to-from cellphones.

[kurtdriver]

Can you not get the internet at home? Files can be encrypted only by their owner and root. Who owns /var/spool/mail?
Maybe you can ask root to change your user id to 0