If the home folder is encrypted, can data still be stolen?

Question

Encryption

I installed kubuntu for myself, encrypted the home folder according to the instructions
https://losst.ru/shifrovanie-domashnej-papki-v-ubuntu

, if I boot from a live cd, you can see that there are 2 files inside the folder, that is, there is nothing available and everything is buzzing, but!
if someone gains access to a PC and through the same live cd enters and resets the root password, will he get access to the encrypted data?

Answer 1

encrypted the home folder according to the instructions

What for? So who are you trying to protect yourself from?
From a wife / husband / neighbor - it doesn’t make much sense, unless you live in a hostel.
From the employer when remote - well, maybe there is some sense ...
From the employer in the office, from the state - there is no point, since no one will break your "protection". They will break you.
Encryption of file systems has nothing to do with the user's password. It is performed either by a password entered from the keyboard (often not stored anywhere - if the password is forgotten, given to piz..c), or by a certificate that can be stored somewhere - and if you know where to steal it, you can decrypt it.

Answer 2

They can, since now all processors contain hardware backdoors, this is not to mention the fact that the Linux kernel can also have backdoors, i.e. there is no absolute protection.

Answer 3

Once, Edik Snowden told the whole world that even encrypted folders on Google.Docs are not a fig not encrypted inside their own. clouds and drew a picture on a napkin. The bottom line is that Edik had nothing to do with encryption, and encryption is different from encryption.
In this case, not files are encrypted, but the file system itself, a password and a key are used. So, even if the admin comes in and resets the root, he will not "reset" the file system encoding - he will just have something unreadable there in the "Admin_durak" folder
.
PS: well, only the processor backdoor on asm can help out [sarcasm]

Answer 4

if someone gains access to a PC and through the same live cd enters and resets the root password, will he get access to the encrypted data?

As far as I understand, no - since you need a password for decryption, just logging in as this user is not enough.

Answer 5

no, it won’t get it without keys... eCryptfs is basically a good thing, but inconvenient, it’s more convenient to make a separate LUKS partition and put the Home folder there, and if you need to store some work data, for example, large files, then it’s better to use VeraCrypt