~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes to m4 from revision 894

From Revision 894 to 284

Rev	Summary	Authors	Date
303	move the modprobe to a better place move the modprobe to a better place Move the modprobe ecryptfs code to the get-version function. Use /sbin since it might not be in the path. Discard errors, since this code might not be called by root. Add a comment, explaining what's going on. A printf() if it still fails, noting that the user might need to run modprobe ecryptfs as root might be a nice enhancement. From: Michal Hlavinka <mhlavink@redhat.com> Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
302	fix nss passphrase (un)wrapping problems fix nss passphrase (un)wrapping problems Thanks to Michal Hlavinka for this patch, which fixes: * https://bugzilla.redhat.com/show_bug.cgi?id=479762 * https://bugs.edge.launchpad.net/fedora/+bug/316425 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
301	make most of the code compatible with -Werror make most of the code compatible with -Werror Thanks to Michal Hlavinka for the patch. This has been on my to-do list for a while now! Patch retrieved from: https://bugzilla.redhat.com/show_bug.cgi?id=479762 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
300	try to load module on get version failure try to load module on get version failure Fixes https://bugzilla.redhat.com/show_bug.cgi?id=460496 Thanks to Michal Hlavinka for the patch. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
299	Release ecryptfs-utils-69 Release ecryptfs-utils-69 ecryptfs-utils-69 * Released 2008-01-26 * Support for filename encryption * Silence some less valuable error messages * Fix the mount counter * Prune keys from the keyring when using the unmount helper Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
298	improve the release script improve the release script Clean up ahead of time, and print link to upload site. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
297	remove insert wrapped passphrase changes remove insert wrapped passphrase changes This work has been moved into the library. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
296	ecryptfs-setup-private: clear keys on final unmount ecryptfs-setup-private: clear keys on final unmount Use ecryptfs-umount-private on the final run, to clear the used keys out of the keyring. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
295	change name of tarball made by release script change name of tarball made by release script Change the name of the .tar.gz archive produced by the release script. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
294	clear relevant keys on helper unmount clear relevant keys on helper unmount If the user calls the ecryptfs-umount-private helper, clear the kernel keyring of the keys used by that private helper. This should help assuage bug: https://bugs.launchpad.net/ecryptfs/+bug/313812 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
293	ecryptfs-setup-private: adjust bootstrap mount opts ecryptfs-setup-private: adjust bootstrap mount opts The encrypted home (bootstrap) mount options should include the fnek signature if in use. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
292	drop error message when no fnek sig drop error message when no fnek sig There should be no error message emitted if the user is not using filename encryption (ie, has no fnek sig in Private.sig). Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
291	ecryptfs-setup-private: fix , vs. \| ecryptfs-setup-private: fix , vs. \| Inadvertently used ,'s instead of \|'s. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
290	ecryptfs-setup-private: default to using fnek ecryptfs-setup-private: default to using fnek If the kernel supports filename encryption at the time of setup, use it. Allow for an override by adding a --no-fnek parameter. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
289	revert manpage change revert manpage change This manpage change is no longer needed. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
288	insert_wrapped_passphrase adds fnek insert_wrapped_passphrase adds fnek This patch adds one small bit of functionality back into the libecryptfs libraries (without changing the api/abi). The insert_wrapped_passphrase functions are already "smart" functions, intended to simplify otherwise complex, multi-step ecryptfs procedures. Thus, if the kernel supports filename encryption, and there is a request to insert a wrapped passphrase into the keyring, the associated filename encryption passphrase is also inserted at the same time. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
287	fix minor build errors fix minor build errors Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
286	remove recent lib modifications remove recent lib modifications As pointed out by Tyler Hicks, the fnek keyring addition could be done by the callers, rather than the library functions. In fact, this is very true. We shouldn't modify the libraries to do this. After this patch, we now have --fnek options that can be passed to: * ecryptfs-setup-private * ecryptfs-add-passphrase * ecryptfs-insert-wrapped-passphrase-into-keyring When present, each of these programs will check if filename encryption is available in the kernel, and if so, a fnek based on the fekek (with a different salt) will be added to the keyring and used for filename encryption. Additionally, the pam_ecryptfs module will also check if filename encryption is available in the kernel, and if so, the fnek will be added to the keyring on login (if a Private.sig and wrapped-passphrase file are found). Additionally, the pam module should also check that the Private.sig file contains 2 lines (the second being the signature of the fnek). This isn't done yet. I need to find an easy/efficient way to do this and propagate that flag through the functions. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
285	remove unused #define and dummy var remove unused #define and dummy var Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
284	fix build error fix build error Fix another build error related to an incomplete revert. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago

Older »