~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes from revision 384.1.11

From Revision 384.1.11 to 376

Rev	Summary	Authors	Tags	Date
384.1.11	refuse mounting with too small rsa key (key_mod_openssl) refuse mounting with too small rsa key (key_mod_openssl) We can't use small rsa keys. FEK is encrypted with RSA key. RSA key allows encryption only rsa_key_bitsize/8. We use 41 B for padding and 3 B are used in message from kernel. So we can encrypt only rsa_key_bitsize/8-41-3 B. But when using 512 b rsa key, it gives us only 20 B, so we can't use ecryptfs_key_bytes > 20. Don't allow mounting with these values. See Red Hat bug #499175. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.10	utils/ecryptfs-add-passphrase.c: fix return codes utils/ecryptfs-add-passphrase.c: fix return codes ecryptfs-add-passphrase returned nonzero if key was already in keayring, but key is in the keyring in the end, so return zero. When passphrase was too long it produced error message, but returned zero. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.9	libecryptfs-swig/libecryptfs.i: fix compiling with werror libecryptfs-swig/libecryptfs.i: fix compiling with werror This source produced warning for different signess. Add cast to char *. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.8	umount.ecryptfs.c: no error for missing key when removing it umount.ecryptfs.c: no error for missing key when removing it Don't print error when trying to remove the key that is already removed, it bothers and makes users nervous. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.7	module_mgr.c: reenable default values module_mgr.c: reenable default values Don't error out with EINVAL when verbosity=0 and some options are missing. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.6	decision_graph.c: fix memory leaks when asking questions decision_graph.c: fix memory leaks when asking questions When repeating questions or in some other (unusual) cases, there could be memory leak in alloc_and_get_val. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.5	decision_graph.c: don't repeat question infinitely decision_graph.c: don't repeat question infinitely When mount is executed with wrong input values, it asks for them, but when executed with no/wrong stdin, it repeats question in infinite loop. Now, question is repeated at most five times. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.4	fix information about openssl_passwd vs. passwd fix information about openssl_passwd vs. passwd Fix extrypfs.7 man page and key_mod_openssl's error message. openssl_passwd value is searched in file, but passwd was reported. to members of ecryptfs group. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.3	restrict suid mount.ecryptfs_private to ecryptfs group only restrict suid mount.ecryptfs_private to ecryptfs group only Add information about suid mount.ecryptfs_private restricted only to members of ecryptfs group. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.2	decision_graph.c: fix uninitialized return code decision_graph.c: fix uninitialized return code Werror build complains about decision_graph.c:375: warning: 'rc' may be used uninitialized in this function. It's true, firs assigment to rc can be bypassed with goto out. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384.1.1	mount.ecryptfs.c: don't pass verbosity option to kernel mount.ecryptfs.c: don't pass verbosity option to kernel verbosity option should not be passed to kernel module, because kernel module doesn't know about it and produces unnecessary lines in logs Signed-off-by: Michal Hlavinka <mhlavink@redhat.com>	Michal Hlavinka		16 years ago
384	388. By Michal Hlavinka 17 hours ago 388. By Michal Hlavinka 17 hours ago key_management.c: if key is already in keyring don't report it as error ecryptfs_add_passphrase_key_to_keyring gets return code 1 if key, it is trying to add to keyring, already exists in keyring. Return code remains 1, just don't report it as error. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 387. By Michal Hlavinka 18 hours ago check and fix asprintf's error codes Change all MOUNT_ERROR return codes for asprintf failure to -ENOMEM. Make sure all return codes are reset to zero or overwritten, because asprintf doesn't return zero for success. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> Acked-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	74	16 years ago
383	don't do the automatic version bump just yet in the release ... don't do the automatic version bump just yet in the release script Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
382	improve release script to support tagging improve release script to support tagging Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
381	install ecryptfs-record-passphrase file in /usr/share/ecrypt... install ecryptfs-record-passphrase file in /usr/share/ecryptfs-utils Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
380	fix build break fix build break add ecryptfs-dot-private appropriately Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
379	bump version to 74 for rc testing bump version to 74 for rc testing Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
378	Changelogs updated. Changelogs updated. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
377	Merge from Michal Hlavinka. Merge from Michal Hlavinka. 386. By Michal Hlavinka 2 hours ago change error codes to be more descriptive Error codes were changed to be more descriptive. MOUNT_ERROR after asprintf changed to ENOMEM, some error codes are no longer filtered to MOUNT_ERROR. And some other changes mostly from general MOUNT_ERROR to ESOMETHING. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 385. By Michal Hlavinka 3 hours ago decision_graph.h, : change definition of node return codes to positive values Using negative node return codes and negative error codes brings too big complications everywhere. Use positive values for node return codes. Change error codes that were changed to positive values back to negative values. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 384. By Michal Hlavinka 3 hours ago mount.ecryptfs.c: insist for yes/no answer for unkown sigs Mounting with new uknown sig is important question. Insist on yes/no answer. Don't assume everything else than yes is no. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 383. By Michal Hlavinka 4 hours ago don't print error for removing key from keyring if it succeeded Prevent printing of "Failed to remove ... with sig [...] from keyring: Success" Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 382. By Michal Hlavinka 4 hours ago module_mgr.c: insist on yes/no answer Insist on yes/no/y/n answer. Don't assume everything starting 'y' is yes and everything else is no. If wrong anser, return WRONG_VALUE for asking again. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 381. By Michal Hlavinka 4 hours ago use ECRYPTFS_NONEMPTY_VALUE_REQUIRED where reasonable Some empty values makes no sense. Require nonempty values in that case (for interactive mount). Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 380. By Michal Hlavinka 5 hours ago pam_ecryptfs.c: don't try to unwrap key for users not using pam mounting Don't delay passphrase verification for users not using pam automounting. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 379. By Michal Hlavinka 5 hours ago add verbosity to man page Added notes about verbosity to ecryptfs man page. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 378. By Michal Hlavinka 5 hours ago decision_graph. : add ECRYPTFS_NONEMPTY_VALUE_REQUIRED flag for nodes Nodes can prevent future problems asking for non-empty value. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 377. By Michal Hlavinka 11 hours ago decision_graph.* : add WRONG_VALUE return code to nodes for asking question again Failing mount because of typo is not nice. If node transaction function returns WRONG_VALUE and we can ask questions (verbosity=0 is not specified), ask question again. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> Acked-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		16 years ago
376	src/utils/ecryptfs-dot-private: sourceable file for accessin... src/utils/ecryptfs-dot-private: sourceable file for accessing your encrypted data; useful for conducting backups -Dustin Kirkland <kirkland@ubuntu.com>Wed, 08 Apr 2009 15:34:37 -0700	Dustin Kirkland		16 years ago

Older »