~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes from revision 894

From Revision 857 to 838

Rev	Summary	Authors	Tags	Date
857	* src/utils/ecryptfs-setup-swap: * src/utils/ecryptfs-setup-swap: - debian/ecryptfs-utils.postinst: On upgrade, uncomment underlying unencrypted swap partitions that are referred to by a device link when crypttab and fstab have a "cryptswap*" device referring to them.	Dustin Kirkland		9 years ago
856	* src/utils/ecryptfs-setup-swap: * src/utils/ecryptfs-setup-swap: - Add setup-swap-check-links.patch: When commenting out existing swap, also consider device symlinks like /dev/mapper/ubuntu--vg-swap_1 or /dev/disks/by-uuid/ into account. Fixes broken cryptswap under LVM and manual setups. (LP: #1453738)	Dustin Kirkland		9 years ago
855	opening 108 opening 108	Dustin Kirkland		10 years ago
854	releasing package ecryptfs-utils version 107 releasing package ecryptfs-utils version 107	Dustin Kirkland		10 years ago
853	- Reject empty passphrases passed into ecryptfs_wrap_passphr... - Reject empty passphrases passed into ecryptfs_wrap_passphrase() * src/libecryptfs/main.c: - Reject empty wrapping passphrases passed into generate_passphrase_sig()	Dustin Kirkland	107	10 years ago
852	* src/libecryptfs/key_management.c: * src/libecryptfs/key_management.c: - Fix a regression when reading version 1 wrapped passphrase files. A return code indicating success was always returned even when an error was encountered. The impact is low since the error situation is still caught when validating either the wrapping password's signature or the wrapped passphrase's signature. Thanks to László Böszörményi for catching this mistake.	Dustin Kirkland		10 years ago
851	* debian/control: * debian/control: - build depend on distro-info, which we use in our release script	Dustin Kirkland		10 years ago
850	* scripts/release.sh: * scripts/release.sh: - a few more release script improvements, build the source package for the Ubuntu development distro	Dustin Kirkland		10 years ago
849	opening 107 opening 107	Dustin Kirkland		10 years ago
848	releasing package ecryptfs-utils version 106 releasing package ecryptfs-utils version 106	Dustin Kirkland		10 years ago
847	remove the -x option, too noisy remove the -x option, too noisy	Dustin Kirkland	106	10 years ago
846	make sure we're in the original working directory when we re... make sure we're in the original working directory when we release	Dustin Kirkland		10 years ago
845	* scripts/release.sh: * scripts/release.sh: - ensure that we try a binary build as part of the release process	Dustin Kirkland		10 years ago
844	* debian/ecryptfs-utils.postinst: LP: #953875 * debian/ecryptfs-utils.postinst: LP: #953875 - detect and clean up after nonexisting cryptswap devices	Dustin Kirkland		10 years ago
843	tests/userspace/Makefile.am: Fix the 'make check' failure pr... tests/userspace/Makefile.am: Fix the 'make check' failure present in the ecryptfs-utils-105 release tarball. The failure was due to the automake file not specifying that some data files should be distributed as part of the v1-to-v2-wrapped-passphrase test, causing the test to fail due to the missing files.	Dustin Kirkland		10 years ago
842	opening 106 opening 106	Dustin Kirkland		10 years ago
841	releasing package ecryptfs-utils version 105 releasing package ecryptfs-utils version 105	Dustin Kirkland		10 years ago
840	* src/utils/ecryptfs-setup-swap: LP: #953875, #1086140 * src/utils/ecryptfs-setup-swap: LP: #953875, #1086140 - fix a whitespace bug in a grep, that might cause us to not comment out the old swap space in /etc/fstab - offset the start of the encrypted swap space by 1KB, which ensures that we don't overwrite the UUID label on the header of the partition - use the aes-xts block cipher, and plain64 initialization vector, which are current best practice here - fixed a grammar nitpick	Dustin Kirkland	105	10 years ago
839	* Introduce the version 2 wrapped-passphrase file format. It... * Introduce the version 2 wrapped-passphrase file format. It adds the ability to combine a randomly generated salt with the wrapping password (typically, a user's login password) prior to performing key strengthening. The version 2 file format is considered to be a intermediate step in strengthening the wrapped-passphrase files of existing encrypted home/private users. Support for reading/writing version 2 wrapped-passphrase files and transparent migration, through pam_ecryptfs, from version 1 to version 2 files is considered safe enough to backport to stable distro releases. The libecryptfs ABI around wrapped-passphrase file handling is not broken. - CVE-2014-9687 * Run wrap-unwrap.sh test as part of the make check target. * Add a new test, called v1-to-v2-wrapped-passphrase.sh, which is suitable for the make check target and verifies v1 to v2 wrapped-passphrase file migration. * Create a temporary file when creating a new wrapped-passphrase file and copy it to its final destination after the file has been fully synced to disk (LP: #1020902)	Tyler Hicks		10 years ago
838	* src/utils/mount.ecryptfs.c * src/utils/mount.ecryptfs.c - fix potential double free on yesno if get_string_stdin exits early without allocating a new buffer and we free yesno on the exit clean up path. * src/libecryptfs/cmd_ln_parser.c - remove redundant if / goto statement that does nothing.	Tyler Hicks		10 years ago