lp:~rlaager/ecryptfs/fix-lp-1574174

Branch merges

Propose for merging

No branches dependent on this one.

Superseded for merging into lp:ecryptfs

Tyler Hicks: Needs Fixing on 2016-04-25

Diff: 14 lines (+2/-2)

1 file modified

src/utils/ecryptfs-setup-private (+2/-2)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1328689: ecryptfs-utils does not work with Ubuntu 14.04, neither with 16.04

High

Fix Released

Link a bug report

Related blueprints

881. By Richard Laager on 2016-04-25

Fix improper "already mounted" errors with ZFS

The obvious approach for using ZFS and ecryptfs together involves
creating a dataset like this:
zfs create -o mountpoint=/home/.ecryptfs/USER rpool/home/USER

As a result, /proc/mounts looks like this:
rpool/home/USER /home/.ecryptfs/USER zfs rw,xattr 0 0

ecryptfs-setup-private checked for existing mount points using a grep
which was effectively left-anchored. Unfortunately, this can match the
device column. A space at the beginning of the pattern corrects this.

I applied the same fix to the CRYPTDIR for consistency and correctness,
though I do not believe it was a practical problem in the same way.

880. By Dustin Kirkland  on 2016-02-27

opening 112

879. By Dustin Kirkland  on 2016-02-27

releasing package ecryptfs-utils version 111

878. By Dustin Kirkland  on 2016-02-26

* src/utils/ecryptfs-setup-private: LP: #1328689
  - fix a long standing bug, where setting up an encrypted private,
    encrypted home, or migrating to an encrypted home did not work
    correctly over ssh sessions
  - the root cause of the bug is some complexity in the handling of
    user keyrings and session keyrings
  - the long term solution would be to correctly use session keyrings
  - the short term solution is to continue linking user and session
    keyrings

877. By Dustin Kirkland  on 2016-02-23

opening 111

876. By Dustin Kirkland  on 2016-02-23

releasing package ecryptfs-utils version 110

875. By Dustin Kirkland  on 2016-02-23

* Remove unnecessary dependencies in the Debian packaging (LP: #1548975)
  - debian/control: Remove opencryptoki from ecryptfs-utils
  - debian/rules: Remove openCryptoki related logic since it was not being
  - debian/control: Remove libtspi-dev from libecryptfs-dev Depends since
  - debian/control: Remove libpkcs11-helper1-dev from libecryptfs-dev
    Depends since --disable-pkcs11-helper is passed to the configure script
  - debian/control: Remove libgpg-error-dev and libgpgme11-dev from
  - debian/control: Remove libgcrypt11-dev from Build-Depends and
  - debian/control: Remove libkeyutils-dev and libpam0g-dev from

874. By Dustin Kirkland  on 2016-02-23

* debian/control: Remove opencryptoki from ecryptfs-utils
  Suggests and libopencryptoki-dev from libecryptfs-dev Depends as
  openCryptoki is not a dependency of eCryptfs.
* debian/rules: Remove openCryptoki related logic since it was not being
  used and is no longer needed
* debian/control: Remove libtspi-dev from libecryptfs-dev Depends since
  --disable-tspi is passed to the configure script
* debian/control: Remove libpkcs11-helper1-dev from libecryptfs-dev Depends
  since --disable-pkcs11-helper is passed to the configure script
* debian/control: Remove libgpg-error-dev and libgpgme11-dev from
  libecryptfs-dev Depends since --disable-gpg is passed to the configure
  script
* debian/control: Remove libgcrypt11-dev from Build-Depends and
  libecryptfs-dev Depends since --enable-nss is passed to the configure
  script to use NSS instead of Libgcrypt
* debian/control: Remove libkeyutils-dev and libpam0g-dev from
  libecryptfs-dev Depends since these are build-time dependencies and not
  run-time dependencies

873. By Dustin Kirkland  on 2016-01-22

opening 110

872. By Dustin Kirkland  on 2016-01-22

releasing package ecryptfs-utils version 109