[ Kees Cook ]
* src/pam_ecryptfs/pam_ecryptfs.c: LP: #938326
- exit, rather than return to prevent duplicate processes
[ Andreas Raster ]
* src/desktop/ecryptfs-find:
- $mounts was quoted once too often
[ George Wilson ]
* src/key_mod/ecryptfs_key_mod_openssl.c,
src/key_mod/ecryptfs_key_mod_pkcs11_helper.c,
src/key_mod/ecryptfs_key_mod_tspi.c: LP: #937331
- IBM would like to grant a license exception for key modules that
require linking to OpenSSL. The change should make the modules
shippable by Linux distributions
[ Dustin Kirkland ]
* debian/copyright:
- note the GPLv2 SSL exception granted by IBM for the key modules
* debian/control, debian/copyright, doc/manpage/ecryptfs.7,
doc/manpage/ecryptfs-add-passphrase.1, doc/manpage/ecryptfsd.8,
doc/manpage/ecryptfs-generate-tpm-key.1, doc/manpage/ecryptfs-
insert-wrapped-passphrase-into-keyring.1, doc/manpage/ecryptfs-
manager.8, doc/manpage/ecryptfs-mount-private.1,
doc/manpage/ecryptfs-recover-private.1, doc/manpage/ecryptfs-rewrap-
passphrase.1, doc/manpage/ecryptfs-rewrite-file.1,
doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs-setup-
swap.1, doc/manpage/ecryptfs-stat.1, doc/manpage/ecryptfs-umount-
private.1, doc/manpage/ecryptfs-unwrap-passphrase.1,
doc/manpage/ecryptfs-wrap-passphrase.1,
doc/manpage/mount.ecryptfs.8, doc/manpage/mount.ecryptfs_private.1,
doc/manpage/pam_ecryptfs.8, doc/manpage/umount.ecryptfs.8,
doc/manpage/umount.ecryptfs_private.1, README,
src/utils/mount.ecryptfs.c:
- use the new ecryptfs.org website where appropriate
* debian/control:
- update to suggest zescrow-client
* precise
[ Sergio Peña ]
* src/libecryptfs/cipher_list.c: LP: #922821
- add the new name of the blowfish cipher (linux >= 3.2)
* src/include/ecryptfs.h, src/libecryptfs/main.c,
src/utils/mount.ecryptfs.c: LP: #917509
- use execl() to mount ecryptfs
- this allows us to support any arbitrary mount options in
/etc/fstab
[ Tyler Hicks ]
* doc/manpage/ecryptfs.7:
- Remove the note saying that the passphrase and openssl key modules are
available by default. That's true upstream but not always true in distro
builds.
* tests/run_tests.sh:
- Make upper and lower mount point arguments optional by automatically
creating directories in /tmp by default.
- Make it possible to run only userspace tests without having to specify
unused mount information
- Accept a comma-separated list of lower filesystems to test on and loop
through all kernel tests for each lower filesystem
- Accept a comma-separated list of tests to run
* tests/lib/etl_funcs.sh:
- Unset $ETL_DISK just before etl_remove_disk() successfully returns
* tests/userspace/Makefile.am:
- Also build 'make check' tests when building with --enable-tests
* include/ecryptfs.h, libecryptfs/Makefile.am,
libecryptfs/cipher_list.c, libecryptfs/module_mgr.c,
utils/io.h: LP: #994813
- remove overly complicated implementation to detect what ciphers
are supported by the currently running kernel's crypto api
- prompt for the entire supported cipher list, if the user selects a
cipher that their kernel doesn't support, the mount will fail
and the kernel will write an error message to the syslog
* src/libecryptfs/module_mgr.c:
- Use correct blowfish block size when displaying supported ciphers to
the user
* tests/kernel/lp-1009207.sh, tests/kernel/Makefile.am,
tests/kernel/tests.rc:
- Add simple test case for incorrect handling of umask and default POSIX
ACL masks
* tests/kernel/lp-994247.sh, tests/kernel/lp-994247/test.c,
tests/kernel/Makefile.am, tests/kernel/tests.rc:
- Add test case for incorrect handling of open /dev/ecryptfs file
descriptors that are passed or inherited by other processes
[ Colin King ]
* tests/lib/etl_funcs.sh:
- etl_lumount() should use DST rather than SRC dir so it can run on Lucid
- use file system appropriate mkfs force flag
- cater for correct ext2 default mount flags
* tests/kernel/lp-509180.sh, tests/kernel/lp-509180/test.c:
- test for trailing garbage at end of files
* tests/kernel/lp-524919.sh, tests/kernel/lp-524919/test.c:
- test case for checking lstat/readlink size
* tests/kernel/lp-870326.sh, tests/kernel/lp-870326/test.c:
- test case for open(), mmap(), close(), modify mmap'd region
* tests/kernel/lp-469664.sh:
- test case for lsattr
* tests/kernel/lp-613873.sh:
- test case for stat modify time
* tests/kernel/lp-745836.sh:
- test case for clearing ECRYPTFS_NEW_FILE flag during truncate
* tests/lib/etl_funcs.sh, tests/kernel/extend-file-random.sh,
tests/kernel/trunc-file.sh (LP: #1007159):
- Add test library function for estimating available space in lower fs
- Use new library function in tests that need to create large files
This bug was fixed in the package ecryptfs-utils - 97-0ubuntu1
---------------
ecryptfs-utils (97-0ubuntu1) quantal; urgency=low
[ Kees Cook ] ecryptfs/ pam_ecryptfs. c: LP: #938326
* src/pam_
- exit, rather than return to prevent duplicate processes
[ Andreas Raster ] ecryptfs- find:
* src/desktop/
- $mounts was quoted once too often
[ George Wilson ] mod/ecryptfs_ key_mod_ openssl. c, key_mod/ ecryptfs_ key_mod_ pkcs11_ helper. c, key_mod/ ecryptfs_ key_mod_ tspi.c: LP: #937331
* src/key_
src/
src/
- IBM would like to grant a license exception for key modules that
require linking to OpenSSL. The change should make the modules
shippable by Linux distributions
[ Dustin Kirkland ] ecryptfs. 7, manpage/ ecryptfs- add-passphrase. 1, doc/manpage/ ecryptfsd. 8, manpage/ ecryptfs- generate- tpm-key. 1, doc/manpage/ ecryptfs- wrapped- passphrase- into-keyring. 1, doc/manpage/ ecryptfs- ecryptfs- mount-private. 1, manpage/ ecryptfs- recover- private. 1, doc/manpage/ ecryptfs- rewrap- ecryptfs- rewrite- file.1, manpage/ ecryptfs- setup-private. 1, doc/manpage/ ecryptfs- setup- ecryptfs- stat.1, doc/manpage/ ecryptfs- umount- ecryptfs- unwrap- passphrase. 1, manpage/ ecryptfs- wrap-passphrase .1, manpage/ mount.ecryptfs. 8, doc/manpage/ mount.ecryptfs_ private. 1, manpage/ pam_ecryptfs. 8, doc/manpage/ umount. ecryptfs. 8, manpage/ umount. ecryptfs_ private. 1, README, utils/mount. ecryptfs. c:
* debian/copyright:
- note the GPLv2 SSL exception granted by IBM for the key modules
* debian/control, debian/copyright, doc/manpage/
doc/
doc/
insert-
manager.8, doc/manpage/
doc/
passphrase.1, doc/manpage/
doc/
swap.1, doc/manpage/
private.1, doc/manpage/
doc/
doc/
doc/
doc/
src/
- use the new ecryptfs.org website where appropriate
* debian/control:
- update to suggest zescrow-client
* precise
[ Sergio Peña ] /cipher_ list.c: LP: #922821 ecryptfs. h, src/libecryptfs /main.c, utils/mount. ecryptfs. c: LP: #917509
* src/libecryptfs
- add the new name of the blowfish cipher (linux >= 3.2)
* src/include/
src/
- use execl() to mount ecryptfs
- this allows us to support any arbitrary mount options in
/etc/fstab
[ Tyler Hicks ] ecryptfs. 7: etl_funcs. sh: /Makefile. am: Makefile. am, /cipher_ list.c, libecryptfs/ module_ mgr.c, /module_ mgr.c: lp-1009207. sh, tests/kernel/ Makefile. am, kernel/ tests.rc: lp-994247. sh, tests/kernel/ lp-994247/ test.c, kernel/ Makefile. am, tests/kernel/ tests.rc:
* doc/manpage/
- Remove the note saying that the passphrase and openssl key modules are
available by default. That's true upstream but not always true in distro
builds.
* tests/run_tests.sh:
- Make upper and lower mount point arguments optional by automatically
creating directories in /tmp by default.
- Make it possible to run only userspace tests without having to specify
unused mount information
- Accept a comma-separated list of lower filesystems to test on and loop
through all kernel tests for each lower filesystem
- Accept a comma-separated list of tests to run
* tests/lib/
- Unset $ETL_DISK just before etl_remove_disk() successfully returns
* tests/userspace
- Also build 'make check' tests when building with --enable-tests
* include/ecryptfs.h, libecryptfs/
libecryptfs
utils/io.h: LP: #994813
- remove overly complicated implementation to detect what ciphers
are supported by the currently running kernel's crypto api
- prompt for the entire supported cipher list, if the user selects a
cipher that their kernel doesn't support, the mount will fail
and the kernel will write an error message to the syslog
* src/libecryptfs
- Use correct blowfish block size when displaying supported ciphers to
the user
* tests/kernel/
tests/
- Add simple test case for incorrect handling of umask and default POSIX
ACL masks
* tests/kernel/
tests/
- Add test case for incorrect handling of open /dev/ecryptfs file
descriptors that are passed or inherited by other processes
[ Colin King ] etl_funcs. sh: lp-509180. sh, tests/kernel/ lp-509180/ test.c: lp-524919. sh, tests/kernel/ lp-524919/ test.c: lp-870326. sh, tests/kernel/ lp-870326/ test.c: lp-469664. sh: lp-613873. sh: lp-745836. sh: etl_funcs. sh, tests/kernel/ extend- file-random. sh, kernel/ trunc-file. sh (LP: #1007159):
* tests/lib/
- etl_lumount() should use DST rather than SRC dir so it can run on Lucid
- use file system appropriate mkfs force flag
- cater for correct ext2 default mount flags
* tests/kernel/
- test for trailing garbage at end of files
* tests/kernel/
- test case for checking lstat/readlink size
* tests/kernel/
- test case for open(), mmap(), close(), modify mmap'd region
* tests/kernel/
- test case for lsattr
* tests/kernel/
- test case for stat modify time
* tests/kernel/
- test case for clearing ECRYPTFS_NEW_FILE flag during truncate
* tests/lib/
tests/
- Add test library function for estimating available space in lower fs
- Use new library function in tests that need to create large files
[ Colin Watson ] ecryptfs- setup-swap: Skip /dev/zram* swap devices
* src/utils/
LP: #979350
[ Serge Hallyn ] mount.ecryptfs_ private. c:
* src/utils/
- EoL fixes
-- Dustin Kirkland <email address hidden> Fri, 15 Jun 2012 09:28:58 -0500