Unless you'd prefer one big patch, I'll start uploading fixes for the various issues here one at a time as I write them.
The current list goes something like this (with help from Marc):
1. Race condition when checking mountpoint during mount
2. Race condition when checking mountpoint during unmount
3. Race condition when checking source during mount
4. Improper mtab handling allowing corruption due to resource limits, signals, etc.
5. Key poisoning in ecryptfs-setup-private due to insecure temp directory
6. ecryptfs-recover-private mounts directly in /tmp
7. Predictable lock counter name and associated races
First, I've attached a first pass at doing mtab handling properly. I plan on addressing 1 and 2 next.
Unless you'd prefer one big patch, I'll start uploading fixes for the various issues here one at a time as I write them.
The current list goes something like this (with help from Marc):
1. Race condition when checking mountpoint during mount setup-private due to insecure temp directory recover- private mounts directly in /tmp
2. Race condition when checking mountpoint during unmount
3. Race condition when checking source during mount
4. Improper mtab handling allowing corruption due to resource limits, signals, etc.
5. Key poisoning in ecryptfs-
6. ecryptfs-
7. Predictable lock counter name and associated races
First, I've attached a first pass at doing mtab handling properly. I plan on addressing 1 and 2 next.