A regular user is unable to mount a VeraCrypt volume without first authenticating with an administrator password. According to the original TrueCrypt documentation, the workaround is to give the user sudo privileges on the veracrypt directory.
Edit visudo and add
USERNAME ALL = (root) NOPASSWD:/usr/bin/veracrypt
This is insecure and opens up doors for vulnerabilities at the root level.
Source: Is it secure to mount VeraCrypt without sudo password in this way | Security SE
How can a regular user safely mount a VeraCrypt container without needing the administrator password or having sudo privileges?
Or is it actually safe to add the above to visudo?
0 Answers