~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes from revision 894

From Revision 894 to 875

Rev	Summary	Authors	Tags	Date
894	Remove unreachable code when parsing mount opt name value pa... Remove unreachable code when parsing mount opt name value pairs Revision 886 introduced a change to the mount option parsing code for name-value pairs. A break was added to a loop once the first '=' is seen. Before the break was added, it was possible that a '=' would be seen, then memory allocated for the name portion of the string, then another '=' could be seen and the previous name string be freed and then reallocated. However, there's no longer a chance of needing to reallocate the name string so the free() is not needed. Discovered by Coverity (CID 1375979)	Tyler Hicks		8 years ago
893	src/utils/ecryptfs-recover-private: Prevent ecryptfs-recover... src/utils/ecryptfs-recover-private: Prevent ecryptfs-recover-private command is terminated because of printing warnings. So just get rid of line "exit 1" in the warn() function.	Jason Xing		8 years ago
892	warn when recovering with a mount passphrase (LP: #1694272, ... warn when recovering with a mount passphrase (LP: #1694272, LP: #1439825) [tyhicks: add context to changelog entry and create helper warn() function]	Tyler Hicks		8 years ago
891	ecryptfs-migrate-home: Pass --nopwcheck to ecryptfs-setup-pr... ecryptfs-migrate-home: Pass --nopwcheck to ecryptfs-setup-private (LP: #1630477) [tyhicks: Remove extra spaces in usage output and add changelog entry]	Tyler Hicks		8 years ago
890	Fix build with OpenSSL 1.1.x (LP: #1670476) Fix build with OpenSSL 1.1.x (LP: #1670476) [tyhicks: Add debian/changelog entry]	Tyler Hicks		8 years ago
889	ecryptfs-mount-private -h prints short usage message (LP: #1... ecryptfs-mount-private -h prints short usage message (LP: #1449253) [tyhicks: Add debian/changelog entry]	Jason Xing		8 years ago
888	Fix loop in ecryptfs-manager when there are no options (LP: ... Fix loop in ecryptfs-manager when there are no options (LP: #1695767) Reproduce case: 1) User doesn't install openssl. 2) Run ecryptfs-manager and make selection 3. It goes in the infinite loop...which means whatever selection you enter next cannot end this command or alter your option. Explanation for the patch: Adding several lines to take such a case into consideration, through testing whether "num_transitions" is set to zero or not we could prevent the infinite loop. If it is set to zero, it will return -EINVAL because "num_transitions" means how many options this command could show to users and zero means that user has no option to choose. [tyhicks: Print to stderr, adjust error message, and add changelog entry]	Jason Xing		8 years ago
887	Add Jason's mount option parser fix to debian/changelog Add Jason's mount option parser fix to debian/changelog	Tyler Hicks		8 years ago
886	libecryptfs: Handle '=' characters in mount option string va... libecryptfs: Handle '=' characters in mount option string values Users cannot mount ecryptfs with "-o passphrase_passwd_file=mykey" (<mykey> is "passwd=123=abc") or "-o passwd=123=abc". Because the passphrase user uses includes "=" character. Because in the manner of process_comma_tok() function, ecryptfs will store "passwd=123" as the @current->name and "abc" as @current->value. That will go wrong when we go into tf_pass_file() function because it cannot match the name "passphrase_passwd" or "passwd". Add two lines in process_comma_tok() to change that case. If we match one "=" character in the string, we don't need to loop and match another "=" again.	Jason Xing		8 years ago
885	debian/changelog: Annotate CVE-2015-8946 and CVE-2016-6224 debian/changelog: Annotate CVE-2015-8946 and CVE-2016-6224	Tyler Hicks		8 years ago
884	debian/ecryptfs-utils.postinst: Fix any unencrypted GPT swap... debian/ecryptfs-utils.postinst: Fix any unencrypted GPT swap partitions that have mistakenly remained marked as auto mount. This should only modify the swap partitions on systems that ecryptfs-setup-swap has been used on. (LP: #1447282, LP: #1597154)	Tyler Hicks		8 years ago
883	tests/kernel/lp-872905.sh: Adjust the test to account for up... tests/kernel/lp-872905.sh: Adjust the test to account for upstream kernel changes that were preventing the test from cleaning up after itself. The kernel had a change of behavior where mounts that are configured to use encrypted filenames will not be able to successfully lookup lower files with plaintext filenames. This change caused the lower filler file, which was being created directly in the lower filesystem, to not be removed during the test cleanup and all of the following tests to fail since the lower filesystem remained full. The upstream kernel commit mentioned above is: 88ae4ab ecryptfs_lookup(): try either only encrypted or plaintext name	Tyler Hicks		8 years ago
882	src/utils/ecryptfs-setup-swap: Prevent unencrypted swap part... src/utils/ecryptfs-setup-swap: Prevent unencrypted swap partitions from being automatically enabled by systemd. This bug affected GPT partitioned NVMe/MMC drives and resulted in the swap partition being used without encryption. It also resulted in a usability issue in that users were erroneously prompted to enter a pass-phrase to unlock their swap partition at boot. (LP: #1597154)	Tyler Hicks		8 years ago
881	[ Richard Laager ] [ Richard Laager ] * src/utils/ecryptfs-setup-private: LP: #1574174 - Adjust the test for discovering already active mount point destinations so that it doesn't accidentally match mount point sources. - Fixes ecryptfs-setup-private issue when attempting to use ZFS and eCryptfs together	Tyler Hicks		9 years ago
880	opening 112 opening 112	Dustin Kirkland		9 years ago
879	releasing package ecryptfs-utils version 111 releasing package ecryptfs-utils version 111	Dustin Kirkland		9 years ago
878	* src/utils/ecryptfs-setup-private: LP: #1328689 * src/utils/ecryptfs-setup-private: LP: #1328689 - fix a long standing bug, where setting up an encrypted private, encrypted home, or migrating to an encrypted home did not work correctly over ssh sessions - the root cause of the bug is some complexity in the handling of user keyrings and session keyrings - the long term solution would be to correctly use session keyrings - the short term solution is to continue linking user and session keyrings	Dustin Kirkland	111	9 years ago
877	opening 111 opening 111	Dustin Kirkland		9 years ago
876	releasing package ecryptfs-utils version 110 releasing package ecryptfs-utils version 110	Dustin Kirkland		9 years ago
875	* Remove unnecessary dependencies in the Debian packaging (L... * Remove unnecessary dependencies in the Debian packaging (LP: #1548975) - debian/control: Remove opencryptoki from ecryptfs-utils - debian/rules: Remove openCryptoki related logic since it was not being - debian/control: Remove libtspi-dev from libecryptfs-dev Depends since - debian/control: Remove libpkcs11-helper1-dev from libecryptfs-dev Depends since --disable-pkcs11-helper is passed to the configure script - debian/control: Remove libgpg-error-dev and libgpgme11-dev from - debian/control: Remove libgcrypt11-dev from Build-Depends and - debian/control: Remove libkeyutils-dev and libpam0g-dev from	Dustin Kirkland	110	9 years ago

Older »