TrueCrypt for Red Hat Enterprise Linux 4 (RHEL4)

To build TrueCrypt execute the following commands:

cd Linux
./build.sh

The build script will first verify requirements for building TrueCrypt.
You may be prompted for additional information, which cannot be determined
automatically. Then the building process will start.

To build and install TrueCrypt, execute the following commands:

cd Linux
./install.sh

The installation script will first verify requirements for running TrueCrypt.
If successful, you will be prompted for installation options. Afterwards, the
following files will be installed:

Kernel/truecrypt.ko
Cli/truecrypt
Cli/Man/truecrypt.1

Install binaries to [/usr/local/bin]: /usr/local/truecrypt-4.0/bin
Error: /usr/local/truecrypt-4.0/bin does not exist

Install binaries to [/usr/local/bin]: /usr/local/truecrypt-4.0/bin
Install man page to [/usr/local/man]: /usr/local/truecrypt-4.0/man
Error: /usr/local/truecrypt-4.0/man/man1 does not exist

Install binaries to [/usr/local/bin]: /usr/local/truecrypt-4.0/bin
Install man page to [/usr/local/man]: /usr/local/truecrypt-4.0/man
Allow non-admin users to run TrueCrypt [y/N]:
Installing kernel module… Done.
Installing truecrypt to /usr/loca
l/truecrypt-4.0/bin… Done.
Installing truecrypt man page to /usr/local/truecrypt-4.0/man/man1… Done.

NAME
truecrypt – manage TrueCrypt volumes

SYNOPSIS
truecrypt [OPTIONS] VOLUME_PATH [MOUNT_DIRECTORY]
truecrypt [OPTIONS] -d | –dismount | -l | –list [MAPPED_VOLUME]
truecrypt -h | –help | –test | -V | –version

DESCRIPTION
Manages encrypted TrueCrypt volumes, which can be mapped as virtual
block devices and used as any other standard block device. All data
being read from a mapped TrueCrypt volume is transparently decrypted
and all data being written to it is transparently encrypted.

OPTIONS
VOLUME_PATH [MOUNT_DIRECTORY]

Open a TrueCrypt volume specified by VOLUME_PATH and map it as
a block device /dev/mapper/truecryptN. N is the first available
device number if not otherwise specified with –device-number.
The filesystem of the mapped volume is mounted at MOUNT_DIREC-
TORY if specified.

-d, –dismount [MAPPED_VOLUME]

Dismount and unmap mapped volumes. If MAPPED_VOLUME is not
specified, all volumes are dismounted and unmapped. See below
for a description of MAPPED_VOLUME.

-l, –list [MAPPED_VOLUME]

Display a list of mapped volumes. If MAPPED_VOLUME is not spec-
ified, all volumes are listed. By default, the list contains
only volume path and mapped device name pairs. A more detailed
list can be enabled by verbose output option (-v). See below
for a description of MAPPED_VOLUME.

MAPPED_VOLUME

Specifies a mapped or mounted volume. One of the following
forms can be used:

1) Path to the encrypted TrueCrypt volume.

2) Mount directory of the volume’s filesystem (if mounted).

3) Device number of the mapped volume.

4) Device name of the mapped volume.

–device-number N

Use device number N when mapping a volume as a block device
/dev/mapper/truecryptN. Default is the first available device.

–display-password

Display password characters while typing.

–filesystem TYPE

Filesystem type to mount. The TYPE argument is passed to
mount(8) command with option -t. Default type is ‘auto’.

-h, –help

Display help information.

-k, –keyfile FILE | DIRECTORY

Use specified keyfile to open a volume to be mapped. When a
directory is specified, all files inside it will be used
(non-recursively). Additional keyfiles can be specified with
multiple -k options. See also option -K.

-K, –keyfile-protected FILE | DIRECTORY

Use specified keyfile to open a hidden volume to be protected.
See also options -k and -P.

–mount-options OPTIONS

Filesystem mount options. The OPTIONS argument is passed to
mount(8) command with option -o.

-p, –password PASSWORD

Use specified password to open a volume. Additional passwords
can be specified with multiple -p options. An empty password
can also be specified (“” in most shells). Note that passing a
password on the command line is potentially insecure as the
password may be visible in the process list (see ps(1)) and/or
stored in a command history file.

–password-tries NUMBER

Prompt NUMBER of times for a password until the correct pass-
word is entered. Default is to prompt three times.

-P, –protect-hidden

Write-protect a hidden volume when mapping an outer volume.
Before mapping the outer volume, the user will be prompted for
a password to open the hidden volume. The size and position of
the hidden volume is then determined and the outer volume is
mounted with all sectors belonging to the hidden volume pro-
tected against write operations. When a write to the protected
area is prevented, the whole volume is switched to read-only
mode. Verbose list command (-vl) can be used to query the state
of the hidden volume protection. Warning message is displayed
when a volume switched to read-only is being dismounted. See
also option -r.

-r, –read-only

Map and/or mount a volume as read-only. Write operations to the
volume may not fail immediately due to the write buffering per-
formed by the system, but the physical write will still be pre-
vented.

–test

Test all internal algorithms used in the process of encryption
and decryption.

–update-time

Do not preserve access and modification timestamps of volume
containers and access timestamps of keyfiles. By default,
timestamps are restored after a volume is unmapped or after a
keyfile is closed.

-v, –verbose

Enable verbose output. Multiple -v options can be specified to
increase the level of verbosity.

-V, –version

Display version information.

EXAMPLES
truecrypt /root/volume.tc /mnt/tc

Map a volume /root/volume.tc and mount its filesystem at
/mnt/tc.

truecrypt -d

Dismount and unmap all mapped volumes.

truecrypt -d /root/volume.tc

Dismount and unmap a volume /root/volume.tc.

truecrypt -d /mnt/tc

Dismount and unmap a volume mounted at /mnt/tc.

truecrypt -vl

Display a detailed list of all mapped volumes.

truecrypt –device-number=1 /dev/hdc1 && mkfs /dev/mapper/truecrypt1

Map a volume /dev/hdc1 and create a new filesystem on it.

truecrypt -P /dev/hdc1 /mnt/tc

Map and mount outer volume /dev/hdc1 and protect hidden volume
within it.

truecrypt -p “” -p “” -k key1 -k key2 -K key_hidden -P volume.tc

Map outer volume ./volume.tc and protect hidden volume withi
n
it. The outer volume is opened with keyfiles ./key1 and ./key2
and the hidden volume with ./key_hidden. Passwords for both
volumes are empty.

DIAGNOSTICS
Exit status 0 is returned if all requested actions completed success-
fully, otherwise 1 is returned. Kernel module reports errors via sys-
tem log with facility kern. See syslogd(8) for more information.

REPORTING BUGS
Report bugs at .

COPYRIGHT
Copyright (C) 2004-2005 TrueCrypt Foundation. All Rights Reserved.
Copyright (C) 1998-2000 Paul Le Roux. All Rights Reserved.
Copyright (C) 2004 TrueCrypt Team. All Rights Reserved.
Copyright (C) 1995-1997 Eric Young. All Rights Reserved.
Copyright (C) 1999-2004 Dr. Brian Gladman. All Rights Reserved.
Copyright (C) 2001 Markus Friedl. All Rights Reserved.

SEE ALSO
http://www.truecrypt.org/documentation.php
mount(8), umount(8), losetup(8), fuser(1), mkfs(8), fsck(8),
dmsetup(8)

truecrypt 4.0 October 2005 TRUECRYPT(1)