[ Dustin Kirkland ]
* src/utils/ecryptfs-setup-swap: switch from vol_id to blkid,
LP: #376486
* debian/ecryptfs-utils.postinst, src/utils/ecryptfs-setup-private:
don't echo mount passphrase if running in bootstrap mode; prune
potential leakages from install log, LP: #383650
* SECURITY UPDATE: mount passphrase recorded in install log (LP: #383650).
- debian/ecryptfs-utils.postinst: prune private information from
installer log
- src/utils/ecryptfs-setup-private: don't echo passphrase if running in
bootstrap mode
- CVE-2009-1296
* src/utils/ecryptfs-setup-private: make some of the lanuage more readable,
(thanks, anrxc)
* README, configure.ac, debian/control, debian/rules,
doc/sourceforge_webpage/README, src/libecryptfs-swig/libecryptfs.py,
src/libecryptfs-swig/libecryptfs_wrap.c,
src/libecryptfs/key_management.c, src/libecryptfs/libecryptfs.pc.in,
src/libecryptfs/main.c, src/pam_ecryptfs/Makefile.am,
src/utils/manager.c, src/utils/mount.ecryptfs.c: move build from gcrypt
to nss (this change has been pending for some time)
* src/utils/ecryptfs-dot-private: dropped, was too hacky
* ecryptfs-mount-private.1, ecryptfs-setup-private.1: align the
documentation and implementation of the wrapping-independent feature,
LP: #383746
* src/utils/ecryptfs-umount-private: use keyctl list @u, since keyctl show
stopped working, LP: #400484, #395082
* src/utils/mount.ecryptfs_private.c: fix counter file locking; solves
a longstanding bug about "random" umount caused by cronjobs, LP: #358573
[ Michal Hlavinka (edits by Dustin Kirkland) ]
* doc/manpage/ecryptfs-mount-private.1,
doc/manpage/ecryptfs-rewrite-file.1,
doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs.7,
doc/manpage/mount.ecryptfs_private.1,
doc/manpage/umount.ecryptfs_private.1: documentation updated to note
possible ecryptfs group membership requirements; Fix ecrypfs.7 man
page and key_mod_openssl's error message; fix typo
* src/libecryptfs/decision_graph.c: put a finite limit (5 tries) on
interactive input; fix memory leaks when asking questions
* src/libecryptfs/module_mgr.c: Don't error out with EINVAL when
verbosity=0 and some options are missing.
* src/utils/umount.ecryptfs.c: no error for missing key when removing it
* src/libecryptfs-swig/libecryptfs.i: fix compile werror, cast char*
* src/utils/ecryptfs_add_passphrase.c: fix/test/use return codes;
return nonzero for --fnek when not supported but used
* src/include/ecryptfs.h, src/key_mod/ecryptfs_key_mod_openssl.c,
src/libecryptfs/module_mgr.c: refuse mounting with too small rsa
key (key_mod_openssl)
* src/utils/ecryptfs_insert_wrapped_passphrase_into_keyring.c: fix return
codes
* src/utils/ecryptfs-rewrite-file: polish output
* src/libecryptfs/key_management.c: inform about full keyring; insert fnek
sig into keyring if fnek support check fails; don't fail if key already
exists in keyring
* src/utils/ecryptfs-setup-private: if the ecryptfs group exists, restrict
ecryptfs-setup-private to members of this group
* src/pam_ecryptfs/pam_ecryptfs.c: dynamically load ecryptfs module by
checking ecryptfs version
* src/libecryptfs/decision_graph.c, src/utils/io.c,
src/utils/mount.ecryptfs.c: fix EOF handling, LP: #371587
* src/desktop/Makefile.am: make desktop files trusted, LP: #371426
[ Dustin Kirkland and Daniel Baumann ]
* debian/control, debian/copyright, debian/ecryptfs-utils.dirs,
debian/ecryptfs-utils.install, debian/ecryptfs-utils.postinst,
debian/rules, ecryptfs-utils.pam-auth-update: sync Ubuntu's
packaging with Debian; drop dpatch, drop libssl build dep, clean
up extraneous debhelper bits, match cflags; remaining diff is only
ecryptfs-utils.prerm
[ Arfrever Frehtes Taifersar Arahesis ]
* key_mod/ecryptfs_key_mod_gpg.c,
key_mod/ecryptfs_key_mod_pkcs11_helper.c,
libecryptfs/key_management.c, utils/ecryptfs_unwrap_passphrase.c:
Fix warnings, initialize a few variables, drop unused ones
[ David Hicks ]
* src/lib/key_management.c: fix stray semicolon that prevents .ecryptfsrc
files from working properly, LP: #372709
[ Michael Rooney ]
* src/python/ecryptfsapi.py: added python api
This bug was fixed in the package ecryptfs-utils - 76-0ubuntu1
---------------
ecryptfs-utils (76-0ubuntu1) karmic; urgency=low
[ Dustin Kirkland ] ecryptfs- setup-swap: switch from vol_id to blkid, ecryptfs- utils.postinst, src/utils/ ecryptfs- setup-private: ecryptfs- utils.postinst: prune private information from ecryptfs- setup-private: don't echo passphrase if running in ecryptfs- setup-private: make some of the lanuage more readable, sourceforge_ webpage/ README, src/libecryptfs -swig/libecrypt fs.py, libecryptfs- swig/libecryptf s_wrap. c, libecryptfs/ key_management. c, src/libecryptfs /libecryptfs. pc.in, libecryptfs/ main.c, src/pam_ ecryptfs/ Makefile. am, utils/manager. c, src/utils/ mount.ecryptfs. c: move build from gcrypt ecryptfs- dot-private: dropped, was too hacky mount-private. 1, ecryptfs- setup-private. 1: align the independent feature, ecryptfs- umount- private: use keyctl list @u, since keyctl show mount.ecryptfs_ private. c: fix counter file locking; solves
* src/utils/
LP: #376486
* debian/
don't echo mount passphrase if running in bootstrap mode; prune
potential leakages from install log, LP: #383650
* SECURITY UPDATE: mount passphrase recorded in install log (LP: #383650).
- debian/
installer log
- src/utils/
bootstrap mode
- CVE-2009-1296
* src/utils/
(thanks, anrxc)
* README, configure.ac, debian/control, debian/rules,
doc/
src/
src/
src/
src/
to nss (this change has been pending for some time)
* src/utils/
* ecryptfs-
documentation and implementation of the wrapping-
LP: #383746
* src/utils/
stopped working, LP: #400484, #395082
* src/utils/
a longstanding bug about "random" umount caused by cronjobs, LP: #358573
[ Michal Hlavinka (edits by Dustin Kirkland) ] ecryptfs- mount-private. 1, manpage/ ecryptfs- rewrite- file.1, manpage/ ecryptfs- setup-private. 1, doc/manpage/ ecryptfs. 7, manpage/ mount.ecryptfs_ private. 1, manpage/ umount. ecryptfs_ private. 1: documentation updated to note /decision_ graph.c: put a finite limit (5 tries) on /module_ mgr.c: Don't error out with EINVAL when umount. ecryptfs. c: no error for missing key when removing it -swig/libecrypt fs.i: fix compile werror, cast char* ecryptfs_ add_passphrase. c: fix/test/use return codes; ecryptfs. h, src/key_ mod/ecryptfs_ key_mod_ openssl. c, libecryptfs/ module_ mgr.c: refuse mounting with too small rsa ecryptfs_ insert_ wrapped_ passphrase_ into_keyring. c: fix return ecryptfs- rewrite- file: polish output /key_management .c: inform about full keyring; insert fnek ecryptfs- setup-private: if the ecryptfs group exists, restrict setup-private to members of this group ecryptfs/ pam_ecryptfs. c: dynamically load ecryptfs module by /decision_ graph.c, src/utils/io.c, utils/mount. ecryptfs. c: fix EOF handling, LP: #371587 Makefile. am: make desktop files trusted, LP: #371426
* doc/manpage/
doc/
doc/
doc/
doc/
possible ecryptfs group membership requirements; Fix ecrypfs.7 man
page and key_mod_openssl's error message; fix typo
* src/libecryptfs
interactive input; fix memory leaks when asking questions
* src/libecryptfs
verbosity=0 and some options are missing.
* src/utils/
* src/libecryptfs
* src/utils/
return nonzero for --fnek when not supported but used
* src/include/
src/
key (key_mod_openssl)
* src/utils/
codes
* src/utils/
* src/libecryptfs
sig into keyring if fnek support check fails; don't fail if key already
exists in keyring
* src/utils/
ecryptfs-
* src/pam_
checking ecryptfs version
* src/libecryptfs
src/
* src/desktop/
[ Dustin Kirkland and Daniel Baumann ] ecryptfs- utils.dirs, ecryptfs- utils.install, debian/ ecryptfs- utils.postinst, utils.pam- auth-update: sync Ubuntu's utils.prerm
* debian/control, debian/copyright, debian/
debian/
debian/rules, ecryptfs-
packaging with Debian; drop dpatch, drop libssl build dep, clean
up extraneous debhelper bits, match cflags; remaining diff is only
ecryptfs-
[ Arfrever Frehtes Taifersar Arahesis ] ecryptfs_ key_mod_ gpg.c, mod/ecryptfs_ key_mod_ pkcs11_ helper. c, /key_management .c, utils/ecryptfs_ unwrap_ passphrase. c:
* key_mod/
key_
libecryptfs
Fix warnings, initialize a few variables, drop unused ones
[ David Hicks ] key_management. c: fix stray semicolon that prevents .ecryptfsrc
* src/lib/
files from working properly, LP: #372709
[ Michael Rooney ] ecryptfsapi. py: added python api
* src/python/
-- Dustin Kirkland <email address hidden> Fri, 17 Jul 2009 18:33:44 -0500