Re: [Ecryptfs-users] Encrypted home directory crashes ecryptfs under Gnome

2007-09-08 Thread Michael Halcrow
On Sat, Sep 08, 2007 at 01:20:17PM -0700, Stefan Farestam wrote: [drm] writeback test succeeded in 2 usecs BUG: unable to handle kernel NULL pointer dereference at virtual address printing eip: *pde = Oops: [#1] ... EIP:0060:[]Tainted: P

Re: [Ecryptfs-users] Problem with serving apache webserver files from encrypted directory

2007-09-08 Thread Michael Halcrow
On Sat, Sep 08, 2007 at 04:36:06PM -0500, Trevor Highland wrote: I was able to reproduce what you are seeing. I turned on debug statements and discovered a few things that stand out. When a file is accessed through apache the file is opened properly through ecryptfs, which includes reading

Re: [Ecryptfs-users] Encrypted home directory crashes ecryptfs under Gnome

2007-09-10 Thread Michael Halcrow
that is failing (probably ecryptfs_create() or ecryptfs_open() in this case). Mike Michael Halcrow wrote the following on 09/08/2007 04:10 PM: On Sat, Sep 08, 2007 at 01:20:17PM -0700, Stefan Farestam wrote: [drm] writeback test succeeded in 2 usecs BUG: unable to handle kernel NULL pointer

Re: [Ecryptfs-users] Problem with serving apache webserver files from encrypted directory

2007-09-11 Thread Michael Halcrow
will be much the same, only set .splice_read to generic_file_splice_read instead. So far I have only tested the 20070911 standalone release; I am in the process of testing the in-kernel fix in preparation for sending the patch upstream. Signed-off-by: Michael Halcrow [EMAIL PROTECTED] --- diff

Re: [Ecryptfs-users] Encrypted Filename support

2007-09-20 Thread Michael Halcrow
On Thu, Sep 20, 2007 at 03:06:54PM -0400, Matt Anderson wrote: Encrypted filenames are listed in the project plan, and in the FAQ there is a example given and a hint that the planned solution at this point is to have a single key per directory for encrypting the filenames. I wonder if anyone

Re: [Ecryptfs-users] Error mounting eCryptfs

2007-10-22 Thread Michael Halcrow
On Mon, Oct 22, 2007 at 09:43:41AM +0200, Markus Huehnerbein wrote: Unable to allocate crypto cipher with name [aes]; rc = [-2] Error attempting to initialize cipher [aes] with key size [16] bytes; rc = [-2] Error parsing options; rc = [-22] It could be that ecb and/or cbc are not loaded.

Re: [Ecryptfs-users] TPM Support / General question on structure

2007-11-13 Thread Michael Halcrow
On Tue, Nov 13, 2007 at 06:00:07PM +0100, Oliver Welter wrote: I am currently playing with ecryptfs/tpm for a project and have two small questions ;=) 1) General one - IIUC, eCryptfs uses an unique key per file and 1) encrypts this key with the mount-wide passphrase? Yes (when mounted under

Re: [Ecryptfs-users] Problem with serving apache webserver files from encrypted directory

2007-12-18 Thread Michael Halcrow
://localhost/home/b/testfile.txt --- Michael Halcrow wrote the following on 10/05/2007 02:03 AM: On Tue, Sep 11, 2007 at 04:45:25PM -0700, Stefan Farestam wrote: I downloaded this new version but couldn't get it to compile on my

Re: [Ecryptfs-users] ecryptfs-utils-35: Spoke too soon

2007-12-19 Thread Michael Halcrow
On Tue, Dec 18, 2007 at 10:44:06AM -0500, jayjwa wrote: The test with one file on this machine was OK, but soon as I put it into real use on another machine and tried to do a mount, the mount fails on empty directories. It says something about not being able to resolve a full path, but there's

Re: [Ecryptfs-users] Newbie problem, Gentoo kernel 2.6.24-r3, ecryptfs-utils-40

2008-04-02 Thread Michael Halcrow
On Tue, Apr 01, 2008 at 10:07:39PM +0200, Karol Ostrovsky wrote: The final missing thing is the filename encryption. I hope that is coming soon. There is no easy way to do filename encryption in eCryptfs without breaking the per-file key semantics and moving toward something like separate

Re: [Ecryptfs-users] [Ecryptfs-devel] Fixed?!

2008-04-07 Thread Michael Halcrow
On Mon, Apr 07, 2008 at 03:31:53PM +0200, Benedikt Driessen wrote: Starting ecryptfsd (the one from the git-repository) with both patches applied to 2.6.24 results in a kernel-oops (which is an improvement, at least not the whole system crashes..). One of these days I am going to learn to test

[Ecryptfs-users] Debian/Ubuntu users: OpenSSL key module warning

2008-05-16 Thread Michael Halcrow
This is for anyone here who has used the eCryptfs OpenSSL key module to encrypt your files on any Debian-derived distributions. This is due to a distribution-specific bug in the OpenSSL package: http://www.securityfocus.com/brief/739 Update your OpenSSL package and migrate your files to a newly

Re: [Ecryptfs-users] mount with wrong passphrase

2008-06-10 Thread Michael Halcrow
On Tue, Jun 10, 2008 at 10:27:04AM +0200, Dietmar Lippold wrote: Michael Halcrow wrote: On Thu, Jun 05, 2008 at 12:45:55PM +0200, Dietmar Lippold wrote: Why is the file /tmp/test/Test readable although root gave the wrong passphrase? If you run ``keyctl show'', you will see

Re: [Ecryptfs-users] reverse-ecryptfs - view non-encrypted rootfs in /mnt/crypt as encrypted files?

2008-09-30 Thread Michael Halcrow
On Mon, Sep 29, 2008 at 03:15:40PM +0200, Tomasz Chmielewski wrote: I have a non-encrypted file system. I would like to transfer/backup the files to a remote locations, which is possibly not trusted. Therefore, I would like to mount my non-encrypted rootfs i.e. to /mnt/crypt, where the

Re: [Ecryptfs-users] Problems installing HMAC Patch

2008-11-15 Thread Michael Halcrow
On Sat, Nov 15, 2008 at 04:21:36PM +0100, Michael Habermann wrote: I was trying to install the HMAC patch, without success. I tried the following: linux 2.6.24-rc5, hmac-patch 2.6.24-rc5-2, ecryptfs-utils 40, 46, 58 and 61. In ecryptfs-utils 58 and 61, I patched the ECRYPTFS_VERSION_HMAC to

Re: [Ecryptfs-users] access control on active inodes

2008-11-16 Thread Michael Halcrow
On Tue, Oct 21, 2008 at 10:42:16AM +0200, Roberto Sassu wrote: i have a question. An application want to access an ecryptfs protected file; then Ecryptfs retrieves the metadata bound to the file and decrypts the FEK using a matched key in the user keyring; finally Ecryptfs setup a

Re: [Ecryptfs-users] NFS disappearing files

2008-11-16 Thread Michael Halcrow
On Thu, Oct 23, 2008 at 10:52:45PM -0600, RB wrote: My particulars: - NFS v3 mount on a 2.6.26.x + pax/grsec kernel eCryptfs is currently not compatible with NFS. It only functions on local filesystems at the moment. pgp0Q3gDDqGpU.pgp Description: PGP signature