[PATCH 0/1][Lucid][Oneiric][Precise][SRU] eCryptfs: check for eCryptfs cipher support at mount

Colin King colin.king at canonical.com
Thu Oct 18 14:49:02 UTC 2012


From: Colin Ian King <colin.king at canonical.com>

BugLink: http://launchpad.net/bugs/338914

SRU for Lucid, Oneiric and Precise

== SRU Justification ==

== Impact ==

Mounting an eCryptfs file system with an unsupported cipher is allowed
and an error only occurs when trying to read/write to the mounted
file system.  This is misleading and wrong, the mount should fail to
mount the file system in this scenario.

== Fix ==

Apply commit 5f5b331d5c21228a6519dcb793fc1629646c51a6

== Test Case ==

Mounting ecryptfs with a cipher that isn't supported and there isn't
an error. Only when one performs read/writes to the file system
we get an error.

mount -it ecryptfs /lower /upper -o ecryptfs_sig=XXXXXXXXXXXXXXXX,ecryptfs_cipher=camellia

..this succeeds but a write to /upper will fail.

With the fix the mount fails and the kernel issues the message:

ecryptfs_parse_options: eCryptfs doesn't support cipher: camellia

Tim Sally (1):
  eCryptfs: check for eCryptfs cipher support at mount

 fs/ecryptfs/main.c |   13 +++++++++++++
 1 file changed, 13 insertions(+)

-- 
1.7.9.5





More information about the kernel-team mailing list