--- truecrypt/linux/cli/man/truecrypt.1 2018/04/24 16:45:04 1.1.1.3 +++ truecrypt/linux/cli/man/truecrypt.1 2018/04/24 16:45:59 1.1.1.4 @@ -1,5 +1,5 @@ .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.35. -.TH TRUECRYPT "1" "April 2006" "truecrypt 4.2" "User Commands" +.TH TRUECRYPT "1" "July 2006" "truecrypt 4.2a" "User Commands" .SH NAME truecrypt - manage TrueCrypt volumes .SH SYNOPSIS @@ -7,6 +7,9 @@ truecrypt - manage TrueCrypt volumes [\fIOPTIONS\fR] \fIVOLUME_PATH \fR[\fIMOUNT_DIRECTORY\fR] .br .B truecrypt +[\fIOPTIONS\fR] \fI-i\fR +.br +.B truecrypt [\fIOPTIONS\fR] \fI-c | --create | -C | --change \fR[\fIVOLUME_PATH\fR] .br .B truecrypt @@ -19,7 +22,7 @@ truecrypt - manage TrueCrypt volumes [\fIOPTIONS\fR] \fI--properties \fR[\fIVOLUME_PATH\fR] .br .B truecrypt -\fI--keyfile-create FILE\fR +[\fIOPTIONS\fR] \fI--keyfile-create FILE\fR .br .B truecrypt \fI-h | --help | --test | -V | --version\fR @@ -38,7 +41,9 @@ otherwise specified with \fB\-N\fR. To m and/or keyfiles (the outer volume cannot be mapped at the same time). Filesystem of the mapped volume is mounted at MOUNT_DIRECTORY if specified. See also options \fB\-\-display\-password\fR, \fB\-\-filesystem\fR, \fB\-k\fR, \fB\-M\fR, \fB\-p\fR, \fB\-P\fR, -\fB\-\-password\-tries\fR, \fB\-r\fR, \fB\-u\fR, \fB\-\-update\-time\fR. +\fB\-\-password\-tries\fR, \fB\-r\fR, \fB\-u\fR, \fB\-\-update\-time\fR. Note that passing some of the options +may affect security or plausible deniability. See options \fB\-i\fR and \fB\-p\fR for more +information. .PP \fB\-\-backup\-headers\fR BACKUP_FILE [VOLUME_PATH] .IP @@ -57,18 +62,20 @@ on command line. Hidden volume can be cr device. Size of the hidden volume should not exceed the free space of the filesystem on the outer volume. Hidden volume protection (see option \fB\-P\fR) should be used to update the outer volume contents after the hidden volume -is created. Note that this command drops effective user ID. +is created. WARNING: To prevent data corruption, you should follow the +instructions in the EXAMPLES section on how to create a hidden volume. +Note that this command drops effective user ID. See also options \fB\-\-cluster\fR, \fB\-\-disable\-progress\fR, \fB\-\-display\-keys\fR, -\fB\-\-encryption\fR, \fB\-k\fR, \fB\-\-filesystem\fR, \fB\-\-hash\fR, \fB\-p\fR, \fB\-\-quick\fR, \fB\-\-size\fR, \fB\-\-type\fR. Note -that passing some of the options may affect plausible deniability. See option -\fB\-p\fR for more information. +\fB\-\-encryption\fR, \fB\-k\fR, \fB\-\-filesystem\fR, \fB\-\-hash\fR, \fB\-p\fR, \fB\-\-random\-source\fR, \fB\-\-quick\fR, \fB\-\-size\fR, +\fB\-\-type\fR. Note that passing some of the options may affect security or plausible +deniability. See option \fB\-p\fR for more information. .PP \fB\-C\fR, \fB\-\-change\fR [VOLUME_PATH] .IP Change a password and/or keyfile(s) of a volume. Volume path and passwords are requested from user if not specified on command line. PKCS\-5 PRF HMAC hash algorithm can be changed with option \fB\-\-hash\fR. See also options \fB\-k\fR, -\fB\-\-keyfile\-add\fR, \fB\-p\fR, \fB\-v\fR. +\fB\-\-keyfile\-add\fR, \fB\-p\fR, \fB\-\-random\-source\fR, \fB\-v\fR. .PP \fB\-d\fR, \fB\-\-dismount\fR [MAPPED_VOLUME] .IP @@ -80,6 +87,12 @@ MAPPED_VOLUME. .IP Display help information. .PP +\fB\-i\fR, \fB\-\-interactive\fR +.IP +Map and mount a volume interactively. Options which may affect security or +plausible deniability are requested from the user. See option \fB\-p\fR for more +information. +.PP \fB\-l\fR, \fB\-\-list\fR [MAPPED_VOLUME] .IP Display a list of mapped volumes. If MAPPED_VOLUME is not specified, all @@ -111,8 +124,7 @@ Test all internal algorithms used in the \fB\-V\fR, \fB\-\-version\fR .IP Display version information. -.PP -MAPPED_VOLUME +.SS "MAPPED_VOLUME:" .IP Specifies a mapped or mounted volume. One of the following forms can be used: .IP @@ -141,7 +153,7 @@ Display encryption keys generated during .IP Display password characters while typing. .PP -\fB\-\-encryption\fR EA +\fB\-\-encryption\fR ENCRYPTION_ALGORITHM .IP Use specified encryption algorithm when creating a new volume. .PP @@ -161,12 +173,14 @@ and/or keyfiles. Use specified keyfile to open a volume to be mapped (or when changing password and/or keyfiles). When a directory is specified, all files inside it will be used (non\-recursively). Additional keyfiles can be specified with multiple \fB\-k\fR -options. See also option \fB\-K\fR. +options. Empty keyfile (\fB\-k\fR ) disables interactive requests for keyfiles +(e.g., when creating a new volume). See also option \fB\-K\fR. .PP \fB\-K\fR, \fB\-\-keyfile\-protected\fR FILE | DIRECTORY .IP -Use specified keyfile to open a hidden volume to be protected. See also -options \fB\-k\fR and \fB\-P\fR. +Use specified keyfile to open a hidden volume to be protected. This option +may be used only when mounting an outer volume with hidden volume protected. +See also options \fB\-k\fR and \fB\-P\fR. .PP \fB\-\-keyfile\-add\fR FILE | DIRECTORY .IP @@ -184,6 +198,10 @@ command with option \fB\-o\fR. Use device number N when mapping a volume as a block device /dev/mapper/truecryptN. Default is the first available device. .PP +\fB\-\-overwrite\fR +.IP +Overwrite files without prompting the user for confirmation. +.PP \fB\-p\fR, \fB\-\-password\fR PASSWORD .IP Use specified password to open a volume. Additional passwords can be @@ -207,7 +225,7 @@ protected against write operations. When prevented, the whole volume is switched to read\-only mode. Verbose list command (\fB\-vl\fR) can be used to query the state of the hidden volume protection. Warning message is displayed when a volume switched to read\-only is being dismounted. -See also option \fB\-r\fR. +See also options \fB\-r\fR and \fB\-i\fR. .PP \fB\-\-quick\fR .IP @@ -215,6 +233,11 @@ Use quick format when creating a new vol when creating a device\-hosted volume. Quick format is always used when creating a hidden volume. .PP +\fB\-\-random\-source\fR FILE +.IP +Use FILE as a source of random numbers. Standard input is used if '\-' is +specified. +.PP \fB\-r\fR, \fB\-\-read\-only\fR .IP Map and mount a volume as read\-only. Write operations to the volume may not @@ -235,9 +258,9 @@ header. TYPE can be 'normal' or 'hidden' \fB\-u\fR, \fB\-\-user\-mount\fR .IP Set default user and group ID of the filesystem being mounted to the user and -group ID of the parent process. Some filesystems (like FAT) do not support -user permissions and, therefore, it is necessary to supply a default user and -group ID to the system when mounting such filesystems. +group ID of the process which executed TrueCrypt. Some filesystems (like FAT) +do not support user permissions and, therefore, it is necessary to supply a +default user and group ID to the system when mounting such filesystems. .PP \fB\-\-update\-time\fR .IP @@ -261,6 +284,10 @@ Map a volume /dev/hda2 (first ATA disk, filesystem at /mnt/tc. Default user\-id is set, which is useful when mounting a filesystem like FAT under a non\-admin user account. .PP +truecrypt \fB\-i\fR +.IP +Map and mount a volume. Options are requested interactively. +.PP truecrypt \fB\-d\fR .IP Dismount and unmap all mapped volumes. @@ -293,17 +320,18 @@ hidden volume with ./key_hidden. Passwor .PP truecrypt \fB\-c\fR .IP -Create a new volume. +Create a new volume. Options are requested interactively. +.PP +truecrypt \fB\-c\fR /dev/hda2 +.IP +Create a new volume hosted at the second primary partition of the first +ATA disk. .PP truecrypt \fB\-k\fR keyfile \fB\-\-size\fR 10M \fB\-\-encryption\fR AES \fB\-\-hash\fR SHA\-1 \fB\-c\fR vol.tc .IP Create a new volume. Options which are not specified on command line are requested from the user. .PP -truecrypt \fB\-\-type\fR normal \fB\-c\fR volume.tc && truecrypt \fB\-\-type\fR hidden \fB\-c\fR volume.tc -.IP -Create a new volume and then create a hidden volume inside it. -.PP truecrypt \fB\-\-keyfile\-add\fR keyfile \fB\-C\fR volume.tc .IP Change password and add a new keyfile to volume. @@ -315,6 +343,31 @@ Change password and remove a keyfile fro truecrypt \fB\-k\fR keyfile \fB\-\-keyfile\-add\fR keyfile \fB\-C\fR volume.tc .IP Change password and keep previous keyfile. +.SS "Creating a hidden volume without risking data corruption:" +.IP +1) Create an outer volume: +.IP +truecrypt \fB\-\-type\fR normal \fB\-\-size\fR 100M \fB\-c\fR volume.tc +.IP +2) Create a hidden volume: +.IP +truecrypt \fB\-\-type\fR hidden \fB\-\-size\fR 50M \fB\-c\fR volume.tc +.IP +3) Mount the outer volume with the hidden volume protected: +.IP +truecrypt \fB\-P\fR volume.tc /mnt/tc +.IP +4) Copy files to the outer volume: +.IP +cp outer_volume_file.txt /mnt/tc +.IP +5) Dismount the outer volume: +.IP +truecrypt \fB\-d\fR volume.tc +.IP +6) If a warning message has been displayed in 5), start again from 1). Either +a larger outer volume should be created in 1), or smaller files should be +copied to the outer volume in 4). .SH DIAGNOSTICS Exit status .B 0 @@ -324,7 +377,7 @@ is returned. Kernel module reports error .BR "kern" ". See" .BR "syslogd" "(8) for more information." .SH "REPORTING BUGS" -Report bugs at . +Report bugs at . .SH COPYRIGHT Copyright \(co 2004-2006 TrueCrypt Foundation. All Rights Reserved. .br @@ -337,8 +390,12 @@ Copyright \(co 1999-2005 Dr. Brian Gladm Copyright \(co 1995-1997 Eric Young. All Rights Reserved. .br Copyright \(co 2001 Markus Friedl. All Rights Reserved. +.PP +Released under the TrueCrypt Collective License 1.0 .SH "SEE ALSO" -.B http://www.truecrypt.org/documentation.php +.B http://www.truecrypt.org/docs/ +.br +.B /usr/share/truecrypt/doc/TrueCrypt-User-Guide.pdf .br .BR "mount" "(8), " "umount" "(8), " "losetup" "(8), " .BR "fuser" "(1), " "mkfs" "(8), " "fsck" "(8), " "dmsetup" "(8)"