Package: libpam-mount
Version: 0.18-6
Severity: normal

Hi,

i have a luks encrypted file /home/ingo:crypt.img mounted on
/home/ingo/crypt with the following line in my .pam_mount.conf

  volume ingo crypt - /home/ingo:crypt.img /home/ingo/crypt 
fsck,nodev,loop,nosuid - -

but with the default settings in /etc/security/pam_mount.conf
that leaves one loop device after logout.


If i change the line in /etc/security/pam_mount.conf from

  cryptmount /bin/mount -t crypt "%(before=\"-o \" OPTIONS)" %(VOLUME) %(MNTPT)

to

  cryptmount /sbin/mount.crypt %(VOLUME) %(MNTPT) -o "%(OPTIONS)"

everything works fine.


What seems to happen in the former case is that 'mount' creates a first loop
device and only after that passes this loop device to mount.crypt
which creates an additional loop device by itself.

When umount.crypt gets called, it does not know about the first device
so only removes the second one.

So there seems to be some disagreement on who is responsible for the loop device
create by a loop mount option ?

(Note that i had to remove the "before=" thing because it did pass all
options together with the "-o" in quotes into one argument on which the
umount.crypt choked)

ah, and i tried 'umount -t crypt' but that was even worse,
it did just a normal umount without considering all the special stuff.


ingo



-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22.5
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages libpam-mount depends on:
ii  libc6                   2.6.1-1+b1       GNU C Library: Shared libraries
ii  libglib2.0-0            2.14.0-2         The GLib library of C routines
ii  libssl0.9.8             0.9.8e-6         SSL shared libraries
ii  mount                   2.13~rc3-7       Tools for mounting and manipulatin
ii  zlib1g                  1:1.2.3.3.dfsg-5 compression library - runtime

libpam-mount recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to