Comment 3 for bug 313812

Revision history for this message
Dustin Kirkland  (kirkland) wrote : Re: ecryptfs can be mounted with any passphrase

I have committed a partial fix, will be in the -69 release.

See:
 * http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=commit;h=1abdd21606f764382f2abc8a73abda091ace76fd

This will clear the keyring of the relevant keys in the encrypted home/encrypted private case (ie, if you're using our helpers).

Otherwise, you need to clear your keyring with "keyctl clear @u", or prune out particular key(s) with "keyctl unlink $FOO @u".

Tyler has mentioned a possibility of solving this with an umount.ecryptfs helper, as an option. As such, I'm going to leave this upstream bug open, and assign it to him.

:-Dustin