~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes to src/libecryptfs/module_mgr.c from revision 894

From Revision 894 to 299

Rev	Summary	Authors	Date
815	r801 introduced the use of strtoumax(), which returns UINTMA... r801 introduced the use of strtoumax(), which returns UINTMAX_MAX on overflow. However, r801 incorrectly checked for UINT_MAX.	Tyler Hicks	11 years ago
803	Fix -Wempty-body warning Fix -Wempty-body warning	Tyler Hicks	11 years ago
802	Remove the unused 'order' member of the supported_key_bytes ... Remove the unused 'order' member of the supported_key_bytes struct	Tyler Hicks	11 years ago
801	Fix sign comparison warnings and other issues surrounding th... Fix sign comparison warnings and other issues surrounding the uint32_t type used for key_bytes	Tyler Hicks	11 years ago
792	* configure.ac: * configure.ac: - Set AM_CPPFLAGS to always include config.h as the first include file. Some .c files correctly included config.h before anything else. The majority of .c files got this wrong by including it after other header files, including it multiple times, or not including it at all. Including it in the AM_CPPFLAGS should solve these problems and keep future mistakes from happening in new source files. * Additionally, all instances of '#include "config.h"' were removed from the tree	Tyler Hicks	11 years ago
777	* src/libecryptfs/decision_graph.c, src/libecryptfs/key_mana... * src/libecryptfs/decision_graph.c, src/libecryptfs/key_management.c, src/libecryptfs/main.c, src/libecryptfs/module_mgr.c, src/utils/io.c, src/utils/mount.ecryptfs_private.c, tests/kernel/inotify/test.c, tests/kernel/trunc-file/test.c, tests/userspace/wrap-unwrap/test.c: - Fixed a pile of minor bugs (memory leaks, unclosed file descriptors, etc.) mostly in error paths	Tyler Hicks	12 years ago
707	* src/libecryptfs/module_mgr.c, src/pam_ecryptfs/pam_ecryptf... * src/libecryptfs/module_mgr.c, src/pam_ecryptfs/pam_ecryptfs.c: - fix compiler warnings There is still a warning remaining due to an unhandled error condition but I'm not familiar enough with that part of the code to know how to properly handle it: pam_ecryptfs.c: In function 'private_dir': pam_ecryptfs.c:359:12: warning: ignoring return value of 'symlink', declared with attribute warn_unused_result [-Wunused-result]	Tyler Hicks	12 years ago
688	* src/libecryptfs/module_mgr.c: * src/libecryptfs/module_mgr.c: - Use correct blowfish block size when displaying supported ciphers to the user Thanks to Jussi Kivilinna for bringing this to our attention!	Tyler Hicks	13 years ago
684	* include/ecryptfs.h, libecryptfs/Makefile.am, * include/ecryptfs.h, libecryptfs/Makefile.am, libecryptfs/cipher_list.c, libecryptfs/module_mgr.c, utils/io.h: LP: #994813 - remove overly complicated implementation to detect what ciphers are supported by the currently running kernel's crypto api - prompt for the entire supported cipher list, if the user selects a cipher that their kernel doesn't support, the mount will fail and the kernel will write an error message to the syslog	Tyler Hicks	13 years ago
451	* src/libecryptfs/module_mgr.c: fix typo * src/libecryptfs/module_mgr.c: fix typo Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
425	Add 56 byte blowfish support Add 56 byte blowfish support A user claimed we had a regression in 56 byte blowfish support, but it turns out that we weren't explicitly supporting it, anyways. This patch adds it to the list of supported ciphers. Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>	tyhicks	15 years ago
407	* doc/manpage/ecryptfs-mount-private.1, * doc/manpage/ecryptfs-mount-private.1, doc/manpage/ecryptfs-rewrite-file.1, doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs.7, doc/manpage/mount.ecryptfs_private.1, doc/manpage/umount.ecryptfs_private.1: documentation updated to note possible ecryptfs group membership requirements; Fix ecrypfs.7 man page and key_mod_openssl's error message; fix typo * src/libecryptfs/decision_graph.c: put a finite limit (5 tries) on interactive input; fix memory leaks when asking questions * src/libecryptfs/module_mgr.c: Don't error out with EINVAL when verbosity=0 and some options are missing. * src/utils/umount.ecryptfs.c: no error for missing key when removing it * src/libecryptfs-swig/libecryptfs.i: fix compile werror, cast char* * src/utils/ecryptfs_add_passphrase.c: fix/test/use return codes; return nonzero for --fnek when not supported but used * src/include/ecryptfs.h, src/key_mod/ecryptfs_key_mod_openssl.c, src/libecryptfs/module_mgr.c: refuse mounting with too small rsa key (key_mod_openssl) * src/utils/ecryptfs_insert_wrapped_passphrase_into_keyring.c: fix return codes * src/utils/ecryptfs-rewrite-file: polish output * src/libecryptfs/key_management.c: inform about full keyring; insert fnek sig into keyring if fnek support check fails; don't fail if key already exists in keyring * src/utils/ecryptfs-setup-private: if the ecryptfs group exists, restrict ecryptfs-setup-private to members of this group * src/pam_ecryptfs/pam_ecryptfs.c: dynamically load ecryptfs module by checking ecryptfs version * src/libecryptfs/decision_graph.c, src/utils/io.c, src/utils/mount.ecryptfs.c: fix EOF handling, LP: #371587 * src/desktop/Makefile.am: make desktop files trusted, LP: #371426 [ Michal Hlavinka (edits by Dustin Kirkland) ] Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	15 years ago
377	Merge from Michal Hlavinka. Merge from Michal Hlavinka. 386. By Michal Hlavinka 2 hours ago change error codes to be more descriptive Error codes were changed to be more descriptive. MOUNT_ERROR after asprintf changed to ENOMEM, some error codes are no longer filtered to MOUNT_ERROR. And some other changes mostly from general MOUNT_ERROR to ESOMETHING. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 385. By Michal Hlavinka 3 hours ago decision_graph.h, : change definition of node return codes to positive values Using negative node return codes and negative error codes brings too big complications everywhere. Use positive values for node return codes. Change error codes that were changed to positive values back to negative values. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 384. By Michal Hlavinka 3 hours ago mount.ecryptfs.c: insist for yes/no answer for unkown sigs Mounting with new uknown sig is important question. Insist on yes/no answer. Don't assume everything else than yes is no. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 383. By Michal Hlavinka 4 hours ago don't print error for removing key from keyring if it succeeded Prevent printing of "Failed to remove ... with sig [...] from keyring: Success" Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 382. By Michal Hlavinka 4 hours ago module_mgr.c: insist on yes/no answer Insist on yes/no/y/n answer. Don't assume everything starting 'y' is yes and everything else is no. If wrong anser, return WRONG_VALUE for asking again. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 381. By Michal Hlavinka 4 hours ago use ECRYPTFS_NONEMPTY_VALUE_REQUIRED where reasonable Some empty values makes no sense. Require nonempty values in that case (for interactive mount). Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 380. By Michal Hlavinka 5 hours ago pam_ecryptfs.c: don't try to unwrap key for users not using pam mounting Don't delay passphrase verification for users not using pam automounting. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 379. By Michal Hlavinka 5 hours ago add verbosity to man page Added notes about verbosity to ecryptfs man page. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 378. By Michal Hlavinka 5 hours ago decision_graph. : add ECRYPTFS_NONEMPTY_VALUE_REQUIRED flag for nodes Nodes can prevent future problems asking for non-empty value. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> 377. By Michal Hlavinka 11 hours ago decision_graph.* : add WRONG_VALUE return code to nodes for asking question again Failing mount because of typo is not nice. If node transaction function returns WRONG_VALUE and we can ask questions (verbosity=0 is not specified), ask question again. Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> Acked-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
342	fix mount parameter handling fix mount parameter handling Reset return code to zero when returned code means success. This fixes Bug #331948 Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> Acked-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
317	improve interactive mode of mount.ecryptfs improve interactive mode of mount.ecryptfs - make interactive mode work - echo when entering path to key file or fd - fix mount option parsing - fix error for empty passphrase - fix (some) error codes - don't error out when user cancels mount Signed-off-by: Michal Hlavinka <mhlavink@redhat.com> Acked-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
303	move the modprobe to a better place move the modprobe to a better place Move the modprobe ecryptfs code to the get-version function. Use /sbin since it might not be in the path. Discard errors, since this code might not be called by root. Add a comment, explaining what's going on. A printf() if it still fails, noting that the user might need to run modprobe ecryptfs as root might be a nice enhancement. From: Michal Hlavinka <mhlavink@redhat.com> Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
302	fix nss passphrase (un)wrapping problems fix nss passphrase (un)wrapping problems Thanks to Michal Hlavinka for this patch, which fixes: * https://bugzilla.redhat.com/show_bug.cgi?id=479762 * https://bugs.edge.launchpad.net/fedora/+bug/316425 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
301	make most of the code compatible with -Werror make most of the code compatible with -Werror Thanks to Michal Hlavinka for the patch. This has been on my to-do list for a while now! Patch retrieved from: https://bugzilla.redhat.com/show_bug.cgi?id=479762 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
300	try to load module on get version failure try to load module on get version failure Fixes https://bugzilla.redhat.com/show_bug.cgi?id=460496 Thanks to Michal Hlavinka for the patch. Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago
299	Release ecryptfs-utils-69 Release ecryptfs-utils-69 ecryptfs-utils-69 * Released 2008-01-26 * Support for filename encryption * Silence some less valuable error messages * Fix the mount counter * Prune keys from the keyring when using the unmount helper Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	16 years ago

Older »