313812 : Code : eCryptfs

Get this branch:: bzr branch lp:~tyhicks/ecryptfs/313812

Only Tyler Hicks can upload to this branch. If you are Tyler Hicks please log in for upload directions.

Branch merges

No branches dependent on this one.

Merged into lp:~ecryptfs/ecryptfs/ecryptfs-utils at revision 306

Dustin Kirkland : Pending requested 2009-02-06

Medium

Fix Released

Link a bug report

Related blueprints

Branch information

Owner:: Tyler Hicks

Project:: eCryptfs

Status:: Merged

Recent revisions

304. By Tyler Hicks on 2009-02-06

Automatically unlink fekek and fnek at unmount with mount helpers

A feature request was made for the automatic removal of the fekek and
fnek from the keyring at unmount time when using the mount helpers.
The best way to do this involved creating an eCryptfs umount helper,
but I didn't want it to affect the users who don't use the eCryptfs
mount helper.

This patch creates a new eCryptfs umount helper that looks in the mount
options for ecryptfs_unlink_sigs. If that option is found, it will
determine the ecryptfs_sig and the ecryptfs_fnek_sig, if one exists, and
unlink those auth toks from the user keyring. If the
ecryptfs_unlink_sigs option is not detected, a normal umount will occur.

By default, the mount helper will now insert ecryptfs_unlink_sigs into
the mount options. This will not affect users who have pre-existing
fstab entries and are not expecting their keys to unlinked at umount.

Signed-off-by: Tyler Hicks <email address hidden>

303. By Dustin Kirkland  on 2009-02-03

move the modprobe to a better place

Move the modprobe ecryptfs code to the get-version function.
Use /sbin since it might not be in the path.
Discard errors, since this code might not be called by root.
Add a comment, explaining what's going on.

A printf() if it still fails, noting that the user might need
to run modprobe ecryptfs as root might be a nice enhancement.

From: Michal Hlavinka <email address hidden>
Signed-off-by: Dustin Kirkland <email address hidden>

302. By Dustin Kirkland  on 2009-02-03

fix nss passphrase (un)wrapping problems

Thanks to Michal Hlavinka for this patch, which fixes:
* https://bugzilla.redhat.com/show_bug.cgi?id=479762
* https://bugs.edge.launchpad.net/fedora/+bug/316425