Can two users access one stash?

Asked by David

My use case is as follows: I want to encrypt my employer's code on my machine, but have it accessible to me when I log, or a colleague when they log in using a separate account, or if they log in remotely. (I assume GEncFSM doesn't handle the last case at all, and this would be handled using a CLI EncFS tool.)

Is it possible to set up a stash so that two users can independently log in and access and modify the same stash? If so, how?

Semi-concurrent access would be a nice-to-have. (User A logs in, automatically decrypts the stash, modifies a file in the stash and saves, does not log out, returns to login screen without logging out, User B logs in, automatically (re?)decrypts the stash, can access the file and see the changes and make further changes.)

Obviously I'm assuming that users cannot access files decrypted by other users. If this is untrue, please disabuse me of this assumption :)

Question information

Language:
English Edit question
Status:
Solved
For:
Gnome Encfs Manager Edit question
Assignee:
No assignee Edit question
Solved by:
Moritz Molch
Solved:
Last query:
Last reply:
Revision history for this message
Best Moritz Molch (mmolch) said :
#1

I don't see a problem with several users mounting and using the same stash at the same time. It is even possible to have a different password for each user by using copies of the encfs configuration file. Just make sure that you set the permissions on the stash right (not the mount-directory).

Revision history for this message
David (lofidevops) said :
#2

I'm still getting used to EncFS terminology, so just to clarify for myself: stash refers to the encrypted folder, mount refers to the (mounted) decrypted folder. So both users need access to and permissions on the (same) stash folder, and they would create (independent) mount folders and modify files in their mount folder only. Any concurrent access concerns would be the same as if they were accessing some folder they both had permissions on.

Revision history for this message
David (lofidevops) said :
#3

Thanks LibertyZero, that solved my question.