Way to encrypt a folder and then only allow certain processes to have access to that folder

encryptionfilevault

I'm aware of technique for creating encrypted folders using disk utility.

But I believe once it is unlocked and mounted, any process owned as you or root could read that folder.

I'm looking for a way to encrypt a folder and then only allow certain procs access.

Here's a scenario: Google chrome keeps a directory for cache data, bookmarks, history and the like.

I'd like to create an encrypted folder for this that is only unlocked for chrome. And keep it encrypted for any backup software or scanners… things that could potentially be running as root that could override an filesystem perms.

Best Answer

As far as I know, there is no such software available on the net. You can turn on EFS encryption for your private folder, but Windows doesn't give you options to grant access rights for different processes, and EFS only works on NTFS partitions.

There is a third-party software called Lock My Folders, which works the similar way like EFS, and it lets you create a secure folder to transparently encrypt/decrypt the files inside. But it also lacks the feature of restricting process access to the encrypted folder.

Related Question