Re: pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-08 Thread Gleb Kurtsou
On (08/09/2010 11:25), Daniel O'Connor wrote: On 08/09/2010, at 3:22, Gleb Kurtsou wrote: Please note that your home directory has to be mounted, I mount it in /etc/rc.local, but don't add any keys. pam_pefs adds the key. Also note that it has to be exactly your home directory (/home/gleb

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-08 Thread Kevin Oberman
Date: Tue, 7 Sep 2010 21:46:18 +0300 From: Gleb Kurtsou gleb.kurt...@gmail.com On (07/09/2010 10:57), Kevin Oberman wrote: On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Robert Watson
On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 09/06/10 20:38, Gleb Kurtsou wrote: Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 09/06/10 20:38, Gleb Kurtsou wrote: Tested on top of ZFS, UFS and tmpfs on amd64 and i386; both 9-CURRENT and 8-STABLE supported. You probably didn't test it, but I've tried pefs on top of ext2fs (I use ext2fs to share data between OSes) and it quickly panicked.

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 14:28), Robert Watson wrote: On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse

pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 16:32), Thomas Vogt wrote: [...] I've an issue with pam_pefs: === lib/libpam/modules/pam_pefs (install) install -C -o root -g wheel -m 444 libpam_pefs.a /usr/lib install -C -o root -g wheel -m 444 libpam_pefs_p.a /usr/lib install -o root -g wheel -m 444 pam_pefs.8.gz

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Kevin Oberman
On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
Thanks to Peter Holm and Thomas Vogt for finding several bugs: * Compilation with DIAGNOSTIC option * Vnode reference and lock leak in pefs_rename() I've uploaded new version to test: http://github.com/downloads/glk/pefs/pefs-2010-09-07.tar.gz Github repository is also updated. Also note, that

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 10:57), Kevin Oberman wrote: On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 17:04), Ivan Voras wrote: On 09/06/10 20:38, Gleb Kurtsou wrote: Tested on top of ZFS, UFS and tmpfs on amd64 and i386; both 9-CURRENT and 8-STABLE supported. You probably didn't test it, but I've tried pefs on top of ext2fs (I use ext2fs to share data between OSes) and

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 16:27), Ivan Voras wrote: On 09/06/10 20:38, Gleb Kurtsou wrote: Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 7 September 2010 22:05, Gleb Kurtsou gleb.kurt...@gmail.com wrote: On (07/09/2010 16:27), Ivan Voras wrote: On 09/06/10 20:38, Gleb Kurtsou wrote: Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project

Re: pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-07 Thread Daniel O'Connor
On 08/09/2010, at 3:22, Gleb Kurtsou wrote: Please note that your home directory has to be mounted, I mount it in /etc/rc.local, but don't add any keys. pam_pefs adds the key. Also note that it has to be exactly your home directory (/home/gleb in my case), to prevent possible attacks. And

RFC: pefs - stacked cryptographic filesystem

2010-09-06 Thread Gleb Kurtsou
Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've been using it to encrypt my home

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-06 Thread Gleb Kurtsou
Sorry for replying to myself, I've realized I put wrong download link: http://github.com/downloads/glk/pefs/pefs-2010-09-06.tar.gz On (06/09/2010 21:38), Gleb Kurtsou wrote: Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer