Disclaimer: I'm not sure whether or not this belongs in Ask Different or security.stackexchange.com, but I'm using a .dmg and Disk Utility, so I'll put it here. End of disclaimer.

The title says most of it. I created an encrypted .dmg in Disk Utility and I'm wondering: if I copy a file to it, is the file automatically encrypted and locked under the .dmg?

  • When you say the "file" are you referring to the source? The new copy? What's the scenario or threat model you are worried about? – bmike Apr 8 '16 at 17:14

It depends on your viewpoint: a file written to an encrypted disk image is immediately written encrypted to the HDD/SSD where the disk image resides.

Since the file system of the unlocked disk image is still mounted, the file appears as "unencrypted".

So a user, who can access the raw HDD/SSD only, can't read/decode the file content, but a user with the proper permissions/rights to access the whole file system (including the mounted/unlocked disk image) still can read the file.

You can test this yourself: Create an encrypted, normal writeable image.dmg as user1 in the root of your file system with 777 permissions and owner user1:staff. Now mount the image as user1 and add a file with some known content (e.g. a text file containing "stackexchange"). The file system of the encrypted disk is mounted to /Volumes with 700 permissions (only user1 can read/write).

Switch to user2 with the image file being still mounted and open/read the file image.dmg with a hex editor - though you probably see the mounted image on your desktop, you can't access it due to missing permissions. Searching for "stackexchange" will reveal nothing.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .