[Bug 802197] Re: no sysfs entry in /etc/mtab breaks encrypted-home
Launchpad Bug Tracker
802197 at bugs.launchpad.net
Thu Feb 16 20:25:12 UTC 2012
This bug was fixed in the package ecryptfs-utils - 96-0ubuntu1
---------------
ecryptfs-utils (96-0ubuntu1) precise; urgency=low
[ Dustin Kirkland ]
* CONTRIBUTING:
- added a new file to describe how to contribute to ecryptfs
* === added directory img/old, img/old/ecryptfs_14.png,
img/old/ecryptfs_192.png, img/old/ecryptfs_64.png:
- saving the old logos/branding for posterity
* debian/copyright, img/COPYING:
- added CC-by-SA 3.0 license
- use the text version
* img/ecryptfs_14.png, img/ecryptfs_192.png, img/ecryptfs_64.png:
- added scaled copies of images used for Launchpad.net branding
* src/utils/ecryptfs-recover-private: LP: #847505
- add an option to allow user to enter the mount passphrase,
in case they've recorded that, but forgotten their login
passphrase
* src/libecryptfs/sysfs.c: LP: #802197
- default sysfs to /sys, if not found in /etc/mtab
- it seems that reading /etc/mtab for this is outdated
- ensure that ecryptfs works even if there is no sysfs entry
in /etc/mtab
* src/key_mod/ecryptfs_key_mod_tspi.c: LP: #462225
- fix TPM and string_to_uuid 64bits issue
- thanks to Janos for the patch
* precise
[ Tyler Hicks ]
* CONTRIBUTING:
- clarified how to contribute to the ecryptfs kernel module
* tests/lib/etl_funcs.sh:
- created eCryptfs test library of bash functions for use in test
cases and test harnesses
* test/etl_add_passphrase_key_to_keyring.c:
- created a C helper program to allow bash scripts to interface to
the libecryptfs function that adds passphrase-based keys to the
kernel keyring
* tests/kernel/tests.rc, tests/userspace/tests.rc:
- created a test case category files for test harnesses to source
when running testcases of a certain category (destructive, safe,
etc.)
* tests/run_tests.sh:
- created a test harness to run eCryptfs test cases
* tests/kernel/miscdev-bad-count.sh,
tests/kernel/miscdev-bad-count/test.c:
- created test case for miscdev issue reported to mailing list
* tests/kernel/lp-885744.sh:
- created test case for pathconf bug
* tests/kernel/lp-926292.sh:
- created test case for checking stale inode attrs after setxattr
* tests/new.sh:
- created new test case template to copy from
* tests/userspace/verify-passphrase-sig.sh,
tests/userspace/verify-passphrase-sig/test.c:
- created test case, for make check, to test the creation of
passphrase-based fekeks and signatures
* configure.ac, Makefile.am, tests/Makefile.am, tests/lib/Makefile.am,
tests/kernel/Makefile.am, tests/userspace/Makefile.am:
- updated and created autoconf/automake files to build the new tests
directory
- added make check target
[ Eddie Garcia ]
* img/*: LP: #907131
- contributing a new set of logos and branding under the CC-by-SA3.0
license
[ Colin King ]
* tests/kernel/extend-file-random.sh,
tests/kernel/extend-file-random/test.c:
- Test to randomly extend file size, read/write + unlink
* tests/kernel/trunc-file.sh, tests/kernel/trunc-file/test.c:
- Test to exercise file truncation
* tests/kernel/directory-concurrent.sh,
tests/kernel/directory-concurrent/test.c:
- test for directory creation/deletion races with multiple processes
* tests/kernel/file-concurrent.sh,
tests/kernel/file-concurrent/test.c:
- test for file creation/truncation/unlink races with multiple
processes
* tests/kernel/inotify.sh, tests/kernel/inotify/test.c:
- test for proper inotify support
* tests/kernel/mmap-dir.sh, tests/kernel/mmap-dir/test.c:
- test that directory files cannot be mmap'ed
* tests/kernel/read-dir.sh, tests/kernel/read-dir/test.c:
- test that read() on directory files returns the right error
* tests/kernel/setattr-flush-dirty.sh:
- test that the modified timestamp isn't clobbered in writeback
* tests/kernel/inode-race-stat.sh, tests/kernel/inode-race-stat/test.c:
- test for inode initialization race condition
-- Dustin Kirkland <kirkland at ubuntu.com> Thu, 16 Feb 2012 14:22:09 -0600
** Changed in: ecryptfs-utils (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to util-linux in Ubuntu.
https://bugs.launchpad.net/bugs/802197
Title:
no sysfs entry in /etc/mtab breaks encrypted-home
Status in “ecryptfs-utils” package in Ubuntu:
Fix Released
Status in “util-linux” package in Ubuntu:
Fix Released
Bug description:
encrypted-home directories were broken with the latest upgrade of
util-linux.
The issue is that ecryptfs tries to find a sysfs mount point by
reading /etc/mtab (ie, it wants to find 'sysfs' and '/sys').
in ecryptfs/src/libecryptfs/sysfs.c , ecryptfs_get_version tries to
get the version of ecryptfs in this kernel. and then see if it is
capable. That calls 'get_sysfs_mountpoint' which parses /etc/mtab for
the sysfs entry.
The util-linux upgrade to 2.19.1-2ubuntu1 does not write an entry in
/etc/mtab for sysfs.
The end resupt is that the user ends up with file *content* decrypted, but not filenames. They'll see a bunch of filenames with "ECRYPTFS_FNEK_ENCRYPTED" in their name like:
ECRYPTFS_FNEK_ENCRYPTED.FXbGolSeisjWM-Qojv3ajQsDcC-kITIu0KUxZdKsa5gkZBtZLX12p7AKgcrQTja6Hep3FSW8okccMX6-
ECRYPTFS_FNEK_ENCRYPTED.FXbGolSeisjWM-Qojv3ajQsDcC-kITIu0KUxZdKsa5gkZBtZLX12p7AKggO-5p.pSThbVFaNI8aX4-6-
ECRYPTFS_FNEK_ENCRYPTED.FXbGolSeisjWM-Qojv3ajQsDcC-kITIu0KUxZdKsa5gkZBtZLX12p7AKgirB.sNgfbm-8lk0XZWwB-A-
1 possible fix for this is for ecryptfs to read /proc/mounts rather than /etc/mtab.
A work around for this is to:
a.) log in as another user, edit /etc/mtab and add 'sysfs' entry (see /proc/mounts for example), then log in as new user
b.) backlevel util-linux and reboot (so /etc/mtab is updated with sysfs entry via old util-linux).
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: util-linux 2.19.1-2ubuntu1
ProcVersionSignature: Ubuntu 3.0-1.2-generic 3.0.0-rc3
Uname: Linux 3.0-1-generic x86_64
Architecture: amd64
Date: Sun Jun 26 10:50:31 2011
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta amd64 (20100318)
ProcEnviron:
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: util-linux
UpgradeStatus: Upgraded to oneiric on 2010-11-15 (222 days ago)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/802197/+subscriptions
More information about the foundations-bugs
mailing list