~ecryptfs/ecryptfs/trunk : changes

~ecryptfs/ecryptfs/trunk » Changes to src/utils/ecryptfs-setup-private from revision 894

From Revision 894 to 407

Rev	Summary	Authors	Tags	Date
881	[ Richard Laager ] [ Richard Laager ] * src/utils/ecryptfs-setup-private: LP: #1574174 - Adjust the test for discovering already active mount point destinations so that it doesn't accidentally match mount point sources. - Fixes ecryptfs-setup-private issue when attempting to use ZFS and eCryptfs together	Tyler Hicks		9 years ago
878	* src/utils/ecryptfs-setup-private: LP: #1328689 * src/utils/ecryptfs-setup-private: LP: #1328689 - fix a long standing bug, where setting up an encrypted private, encrypted home, or migrating to an encrypted home did not work correctly over ssh sessions - the root cause of the bug is some complexity in the handling of user keyrings and session keyrings - the long term solution would be to correctly use session keyrings - the short term solution is to continue linking user and session keyrings	Dustin Kirkland	111	9 years ago
837	* src/utils/ecryptfs-setup-private: * src/utils/ecryptfs-setup-private: - use /dev/urandom for our testing, as we read a lot of info	Dustin Kirkland		10 years ago
836	* doc/manpage/ecryptfs-setup-private.1, src/utils/ecryptfs-s... * doc/manpage/ecryptfs-setup-private.1, src/utils/ecryptfs-setup- private, src/utils/ecryptfs-setup-swap: LP: #1420424 - use /dev/random rather than /dev/urandom for long lived keys	Dustin Kirkland		10 years ago
589	* debian/ecryptfs-utils.ecryptfs-utils-restore.upstart, * debian/ecryptfs-utils.ecryptfs-utils-restore.upstart, debian/ecryptfs-utils.ecryptfs-utils-save.upstart, src/utils/ecryptfs-migrate-home, src/utils/ecryptfs-setup-private: LP: #883238 - remove 2 upstart scripts, which attempted to "save" users who didn't login after migrating their home; instead, we now require the root user to enter user passwords at migration time	Dustin Kirkland		13 years ago
586	* debian/copyright, debian/ecryptfs-utils.ecryptfs-utils- * debian/copyright, debian/ecryptfs-utils.ecryptfs-utils- restore.upstart, debian/ecryptfs-utils.ecryptfs-utils-save.upstart, doc/manpage/ecryptfs.7, doc/manpage/ecryptfs-add-passphrase.1, doc/manpage/ecryptfs-generate-tpm-key.1, doc/manpage/ecryptfs- insert-wrapped-passphrase-into-keyring.1, doc/manpage/ecryptfs- mount-private.1, doc/manpage/ecryptfs-recover-private.1, doc/manpage/ecryptfs-rewrap-passphrase.1, doc/manpage/ecryptfs- rewrite-file.1, doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs-setup-swap.1, doc/manpage/ecryptfs-stat.1, doc/manpage/ecryptfs-umount-private.1, doc/manpage/ecryptfs-unwrap- passphrase.1, doc/manpage/ecryptfs-wrap-passphrase.1, doc/manpage/fr/ecryptfs-add-passphrase.1, doc/manpage/fr/ecryptfs- generate-tpm-key.1, doc/manpage/fr/ecryptfs-insert-wrapped- passphrase-into-keyring.1, doc/manpage/fr/ecryptfs-mount-private.1, doc/manpage/fr/ecryptfs-rewrap-passphrase.1, doc/manpage/fr/ecryptfs-setup-private.1, doc/manpage/fr/ecryptfs- umount-private.1, doc/manpage/fr/ecryptfs-unwrap-passphrase.1, doc/manpage/fr/ecryptfs-wrap-passphrase.1, doc/manpage/fr/ecryptfs- zombie-kill.1, doc/manpage/fr/ecryptfs-zombie-list.1, doc/manpage/mount.ecryptfs_private.1, doc/manpage/pam_ecryptfs.8, doc/manpage/umount.ecryptfs.8, doc/manpage/umount.ecryptfs_private.1, src/pam_ecryptfs/pam_ecryptfs.c, src/utils/ecryptfs_add_passphrase.c, src/utils/ecryptfs_insert_wrapped_passphrase_into_keyring.c, src/utils/ecryptfs-migrate-home, src/utils/ecryptfs-mount-private, src/utils/ecryptfs-recover-private, src/utils/ecryptfs_rewrap_passphrase.c, src/utils/ecryptfs-rewrite- file, src/utils/ecryptfs-setup-private, src/utils/ecryptfs-setup- swap, src/utils/ecryptfs-umount-private, src/utils/ecryptfs_unwrap_passphrase.c, src/utils/ecryptfs_wrap_passphrase.c: - update some email addresses, moving kirkland@canonical.com -> kirkland@ubuntu.com (which I can still read)	Dustin Kirkland		13 years ago
577	src/utils/ecryptfs-setup-private: LP: #882314 src/utils/ecryptfs-setup-private: LP: #882314	Dustin Kirkland	93	13 years ago
576	* src/utils/ecryptfs-setup-private: * src/utils/ecryptfs-setup-private: - fix preseeded encrypted home Ubuntu installations (thanks Timo!)	Dustin Kirkland		13 years ago
554	* SECURITY UPDATE: privilege escalation via mountpoint race ... * SECURITY UPDATE: privilege escalation via mountpoint race conditions (LP: #732628) - debian/patches/CVE-2011-1831,1832,1834.patch: chdir into mountpoint before checking permissions in src/utils/mount.ecryptfs_private.c. - CVE-2011-1831 - CVE-2011-1832 * SECURITY UPDATE: race condition when checking source during mount (LP: #732628) - debian/patches/CVE-2011-1833.patch: use new ecryptfs_check_dev_ruid kernel option when mounting directory in src/utils/mount.ecryptfs_private.c. - CVE-2011-1833 * SECURITY UPDATE: mtab corruption via improper handling (LP: #732628) - debian/patches/CVE-2011-1831,1832,1834.patch: modify mtab via a temp file first and make sure it succeeds before replacing the real mtab in src/utils/mount.ecryptfs_private.c. - CVE-2011-1834 * SECURITY UPDATE: key poisoning via insecure temp directory handling (LP: #732628) - debian/patches/CVE-2011-1835.patch: make sure we don't copy into a user controlled directory in src/utils/ecryptfs-setup-private. - CVE-2011-1835 * SECURITY UPDATE: information disclosure via recovery mount in /tmp (LP: #732628) - debian/patches/CVE-2011-1836.patch: mount inside protected subdirectory in src/utils/ecryptfs-recover-private. - CVE-2011-1836 * SECURITY UPDATE: arbitrary file overwrite via lock counter race condition (LP: #732628) - debian/patches/CVE-2011-1837.patch: verify permissions with a file descriptor, and don't follow symlinks in src/utils/mount.ecryptfs_private.c. - CVE-2011-1837	Dustin Kirkland		13 years ago
531	* src/utils/ecryptfs-setup-private: * src/utils/ecryptfs-setup-private: - add -p to mkdir, address noise for a non-error - must insert keys during testing phase, since we remove keys on unmount now, LP: #725862	Dustin Kirkland		14 years ago
530	src/utils/ecryptfs-setup-private: add -p to mkdir, address n... src/utils/ecryptfs-setup-private: add -p to mkdir, address noise for a non-error	Dustin Kirkland		14 years ago
529	src/utils/ecryptfs-setup-private: update the Private.* selin... src/utils/ecryptfs-setup-private: update the Private.* selinux contexts	Dustin Kirkland		14 years ago
467	which was broken by the gettext integration, LP: #471725; which was broken by the gettext integration, LP: #471725; in doing so, use $() in place of ``, use '' for gettext arguments, and wrap gettext in "", like this: foo="$(gettext 'blah blah')"	Dustin Kirkland		15 years ago
466	src/utils/ecryptfs-setup-private: fix printing of error stri... src/utils/ecryptfs-setup-private: fix printing of error strings, which was broken by the gettext integration, LP: #471725	Dustin Kirkland		15 years ago
464	src/utils/ecryptfs-setup-private: fix typo, s/getext/gettext... src/utils/ecryptfs-setup-private: fix typo, s/getext/gettext, LP: #456565	Dustin Kirkland		15 years ago
463	src/utils/ecryptfs-setup-private: fix bug where setup-privat... src/utils/ecryptfs-setup-private: fix bug where setup-private incorrectly assumed that the home/private dir ownerships should be owned by USER:USER; instead, default to USER:GROUP, where GROUP is the USER's primary group by default, LP: #445301	Dustin Kirkland		15 years ago
459	src/utils/ecryptfs-setup-private: minor documentation change src/utils/ecryptfs-setup-private: minor documentation change	Dustin Kirkland	80	15 years ago
437	* src/utils/ecryptfs-mount-private, src/utils/ecryptfs-rewri... * src/utils/ecryptfs-mount-private, src/utils/ecryptfs-rewrite-file, src/utils/ecryptfs-setup-private, src/utils/ecryptfs-setup-swap, src/utils/ecryptfs-umount-private: use gettext for all string printing, such that we can internationalize ecryptfs Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		15 years ago
428	* src/utils/ecryptfs-setup-private: when encrypting home, pu... * src/utils/ecryptfs-setup-private: when encrypting home, put the .ecryptfs and .Private data in /home/.ecryptfs rather than /var/lib, as users are forgetting to backup /var/lib, and are often putting /home on a separate partition; furthermore, this gives users a place to access their encrypted data for backup, rather than hiding the data below $HOME, LP: #371719 Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland	77	15 years ago
407	* doc/manpage/ecryptfs-mount-private.1, * doc/manpage/ecryptfs-mount-private.1, doc/manpage/ecryptfs-rewrite-file.1, doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs.7, doc/manpage/mount.ecryptfs_private.1, doc/manpage/umount.ecryptfs_private.1: documentation updated to note possible ecryptfs group membership requirements; Fix ecrypfs.7 man page and key_mod_openssl's error message; fix typo * src/libecryptfs/decision_graph.c: put a finite limit (5 tries) on interactive input; fix memory leaks when asking questions * src/libecryptfs/module_mgr.c: Don't error out with EINVAL when verbosity=0 and some options are missing. * src/utils/umount.ecryptfs.c: no error for missing key when removing it * src/libecryptfs-swig/libecryptfs.i: fix compile werror, cast char* * src/utils/ecryptfs_add_passphrase.c: fix/test/use return codes; return nonzero for --fnek when not supported but used * src/include/ecryptfs.h, src/key_mod/ecryptfs_key_mod_openssl.c, src/libecryptfs/module_mgr.c: refuse mounting with too small rsa key (key_mod_openssl) * src/utils/ecryptfs_insert_wrapped_passphrase_into_keyring.c: fix return codes * src/utils/ecryptfs-rewrite-file: polish output * src/libecryptfs/key_management.c: inform about full keyring; insert fnek sig into keyring if fnek support check fails; don't fail if key already exists in keyring * src/utils/ecryptfs-setup-private: if the ecryptfs group exists, restrict ecryptfs-setup-private to members of this group * src/pam_ecryptfs/pam_ecryptfs.c: dynamically load ecryptfs module by checking ecryptfs version * src/libecryptfs/decision_graph.c, src/utils/io.c, src/utils/mount.ecryptfs.c: fix EOF handling, LP: #371587 * src/desktop/Makefile.am: make desktop files trusted, LP: #371426 [ Michal Hlavinka (edits by Dustin Kirkland) ] Signed-off-by: Dustin Kirkland <kirkland@canonical.com>	Dustin Kirkland		15 years ago

Older »