~ecryptfs/ecryptfs/trunk

ecryptfs-utils-74

  [ Michal Hlavinka ]

  * Changes for RH/Fedora release

    - change error codes to be more descriptive

    - decision_graph.h, *: change definition of node return codes to positive

      values

    - mount.ecryptfs.c: insist for yes/no answer for unkown sigs

    - don't print error for removing key from keyring if it succeeded

    - module_mgr.c: insist on yes/no answer

    - use ECRYPTFS_NONEMPTY_VALUE_REQUIRED where reasonable

    - pam_ecryptfs.c: don't try to unwrap key for users not using pam mounting

    - add verbosity to man page

    - decision_graph.* : add ECRYPTFS_NONEMPTY_VALUE_REQUIRED flag for nodes

    - decision_graph.* : add WRONG_VALUE return code to nodes for asking

      question again

  [ Dustin Kirkland ]

  * src/utils/ecryptfs-setup-private: fix bug in grep when running with LANG

    in other locales, LP: #347969

  * doc/manpage/ecryptfs.7: add notes about verbose option

  * src/desktop: add the desktop files to the dist tarball

  * src/utils/ecryptfs-dot-private: sourceable file for accessing your

    encrypted data;  useful for conducting backups

  [ Martin Pitt and Dustin Kirkland ]

  Reworked the fixes for LP: #352307, remind user to record their passphrase

  * src/desktop/ecryptfs-record-passphrase: run if

    ~/.ecryptfs/.wrapped-passphrase.recorded does NOT exist; touch that

    file upon successful run of unwrap passphrase

  * debian/patches/00list,

    debian/patches/update-notifier-remind-passphrase.dpatch: dropped, since

    this was moved into PAM

ecryptfs-utils-73

  [ Dustin Kirkland ]

  Userspace fixes for LP: #345544, CVE-2009-0787

  * src/utils/ecryptfs-rewrite-file: new script, to rewrite a file,

    forcing it to be re-encrypted when written to disk

  * doc/manpage/ecryptfs-rewrite-file.1: documentation added

  Unrelated fixes in this release

  * src/utils/ecryptfs-mount-private, src/utils/ecryptfs-setup-private,

    src/utils/ecryptfs-setup-swap: use head/line for prompting and reading

    input

  [ Michal Hlavinka ]

  * ecryptfs-setup-private: don't fail with syntax error when kernel

    module not loaded

  * make desktop files standards compliant

  * umount.ecryptfs: don't sigsegv when arguments are missing

ecryptfs-utils-72

  [ Dustin Kirkland ]

  * src/utils/ecryptfs-[u]mount-private: print message about cd $PWD,

    LP: #332331

  * doc/manpage/*: manpage updates

  * debian/ecryptfs-utils.prerm: prevent removal of ecryptfs-utils

    package, if in use, LP: #331085

  * src/utils/ecryptfs-setup-private:

    - allow for LDAP-based logins, LP: #317307

    - add --noautomount, --noautoumount options, LP: #301759

  [ Tyler Hicks ]

  * src/libecryptfs/cipher_list.c: ignore unknown ciphers, LP: #335632

  * doc/manpage/ecryptfs.7: add key sig mount options info, LP: #329491

  * src/utils/mount.ecryptfs.c: scrub unknown option

  [ James Dupin ]

  * doc/manpage/fr/*: initial cut at french manpages

  [ Michal Hlavinka ]

  * src/libecryptfs/module_mgr.c: fix mount parameter handling on

    interactive mounting, LP: #331948

ecryptfs-utils-71

  [ Dustin Kirkland ]

  * src/utils/ecryptfs-setup-swap: a first cut at a script that helps setup

    encrypted swap

  * debian/control: suggest cryptsetup

  [ Michal Hlavinka ]

  * improve interactive mode of mount.ecryptfs

ecryptfs-utils-70

 [ Michal Hlavinka ]

 * Auto module loading improvements

 * Fix nss passphrase (un)wrapping

 * Fix error handling when wrapping passphrase is too long

 * Use %m instead of strerror(errno) everywhere

 * Make the code compile with -Werror

 [ Tyler Hicks ]

 * umount.ecryptfs wrapper, clears keys

 [ Dustin Kirkland ]

 * Add a trailing newline to passphrase printing

 * Hack around glibc/kernel mlock limit issue

ecryptfs-utils-69

 * Released 2008-01-26

 * Support for filename encryption

 * Silence some less valuable error messages

 * Fix the mount counter

 * Prune keys from the keyring when using the unmount helper

ecryptfs-utils-68

 * Released 2008-12-22

 * Reworked mount.ecryptfs_private counter

 * Added interactive interfaces for the /usr/bin/ecryptfs-* utilities

 * Several bug fixes