[ubuntu/quantal] ecryptfs-utils 97-0ubuntu1 (Accepted)

Dustin Kirkland kirkland at ubuntu.com
Fri Jun 15 14:40:53 UTC 2012 

ecryptfs-utils (97-0ubuntu1) quantal; urgency=low

  [ Kees Cook ]
  * src/pam_ecryptfs/pam_ecryptfs.c: LP: #938326
    - exit, rather than return to prevent duplicate processes

  [ Andreas Raster ]
  * src/desktop/ecryptfs-find:
    - $mounts was quoted once too often

  [ George Wilson ]
  * src/key_mod/ecryptfs_key_mod_openssl.c,
    src/key_mod/ecryptfs_key_mod_pkcs11_helper.c,
    src/key_mod/ecryptfs_key_mod_tspi.c: LP: #937331
    - IBM would like to grant a license exception for key modules that
      require linking to OpenSSL. The change should make the modules
      shippable by Linux distributions

  [ Dustin Kirkland ]
  * debian/copyright:
    - note the GPLv2 SSL exception granted by IBM for the key modules
  * debian/control, debian/copyright, doc/manpage/ecryptfs.7,
    doc/manpage/ecryptfs-add-passphrase.1, doc/manpage/ecryptfsd.8,
    doc/manpage/ecryptfs-generate-tpm-key.1, doc/manpage/ecryptfs-
    insert-wrapped-passphrase-into-keyring.1, doc/manpage/ecryptfs-
    manager.8, doc/manpage/ecryptfs-mount-private.1,
    doc/manpage/ecryptfs-recover-private.1, doc/manpage/ecryptfs-rewrap-
    passphrase.1, doc/manpage/ecryptfs-rewrite-file.1,
    doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs-setup-
    swap.1, doc/manpage/ecryptfs-stat.1, doc/manpage/ecryptfs-umount-
    private.1, doc/manpage/ecryptfs-unwrap-passphrase.1,
    doc/manpage/ecryptfs-wrap-passphrase.1,
    doc/manpage/mount.ecryptfs.8, doc/manpage/mount.ecryptfs_private.1,
    doc/manpage/pam_ecryptfs.8, doc/manpage/umount.ecryptfs.8,
    doc/manpage/umount.ecryptfs_private.1, README,
    src/utils/mount.ecryptfs.c:
    - use the new ecryptfs.org website where appropriate
  * debian/control:
    - update to suggest zescrow-client
  * precise

  [ Sergio Peña ]
  * src/libecryptfs/cipher_list.c: LP: #922821
    - add the new name of the blowfish cipher (linux >= 3.2)
  * src/include/ecryptfs.h, src/libecryptfs/main.c,
    src/utils/mount.ecryptfs.c: LP: #917509
    - use execl() to mount ecryptfs
    - this allows us to support any arbitrary mount options in
      /etc/fstab

  [ Tyler Hicks ]
  * doc/manpage/ecryptfs.7:
    - Remove the note saying that the passphrase and openssl key modules are
      available by default. That's true upstream but not always true in distro
      builds.
  * tests/run_tests.sh:
    - Make upper and lower mount point arguments optional by automatically
      creating directories in /tmp by default.
    - Make it possible to run only userspace tests without having to specify
      unused mount information
    - Accept a comma-separated list of lower filesystems to test on and loop
      through all kernel tests for each lower filesystem
    - Accept a comma-separated list of tests to run
  * tests/lib/etl_funcs.sh:
    - Unset $ETL_DISK just before etl_remove_disk() successfully returns
  * tests/userspace/Makefile.am:
    - Also build 'make check' tests when building with --enable-tests
  * include/ecryptfs.h, libecryptfs/Makefile.am,
    libecryptfs/cipher_list.c, libecryptfs/module_mgr.c,
    utils/io.h: LP: #994813
    - remove overly complicated implementation to detect what ciphers
      are supported by the currently running kernel's crypto api
    - prompt for the entire supported cipher list, if the user selects a
      cipher that their kernel doesn't support, the mount will fail
      and the kernel will write an error message to the syslog
  * src/libecryptfs/module_mgr.c:
    - Use correct blowfish block size when displaying supported ciphers to
      the user
  * tests/kernel/lp-1009207.sh, tests/kernel/Makefile.am,
    tests/kernel/tests.rc:
    - Add simple test case for incorrect handling of umask and default POSIX
      ACL masks
  * tests/kernel/lp-994247.sh, tests/kernel/lp-994247/test.c,
    tests/kernel/Makefile.am, tests/kernel/tests.rc:
    - Add test case for incorrect handling of open /dev/ecryptfs file
      descriptors that are passed or inherited by other processes

  [ Colin King ]
  * tests/lib/etl_funcs.sh:
    - etl_lumount() should use DST rather than SRC dir so it can run on Lucid
    - use file system appropriate mkfs force flag
    - cater for correct ext2 default mount flags
  * tests/kernel/lp-509180.sh, tests/kernel/lp-509180/test.c:
    - test for trailing garbage at end of files
  * tests/kernel/lp-524919.sh, tests/kernel/lp-524919/test.c:
    - test case for checking lstat/readlink size
  * tests/kernel/lp-870326.sh, tests/kernel/lp-870326/test.c:
    - test case for open(), mmap(), close(), modify mmap'd region
  * tests/kernel/lp-469664.sh:
    - test case for lsattr
  * tests/kernel/lp-613873.sh:
    - test case for stat modify time
  * tests/kernel/lp-745836.sh:
    - test case for clearing ECRYPTFS_NEW_FILE flag during truncate
  * tests/lib/etl_funcs.sh, tests/kernel/extend-file-random.sh,
    tests/kernel/trunc-file.sh (LP: #1007159):
    - Add test library function for estimating available space in lower fs
    - Use new library function in tests that need to create large files

  [ Colin Watson ]
  * src/utils/ecryptfs-setup-swap: Skip /dev/zram* swap devices
    LP: #979350

  [ Serge Hallyn ]
  * src/utils/mount.ecryptfs_private.c:
    - EoL fixes

Date: Fri, 15 Jun 2012 09:28:58 -0500
Changed-By: Dustin Kirkland <kirkland at ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/ecryptfs-utils/97-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 15 Jun 2012 09:28:58 -0500
Source: ecryptfs-utils
Binary: ecryptfs-utils ecryptfs-utils-dbg libecryptfs0 libecryptfs-dev python-ecryptfs
Architecture: source
Version: 97-0ubuntu1
Distribution: quantal
Urgency: low
Maintainer: Dustin Kirkland <kirkland at ubuntu.com>
Changed-By: Dustin Kirkland <kirkland at ubuntu.com>
Description: 
 ecryptfs-utils - ecryptfs cryptographic filesystem (utilities)
 ecryptfs-utils-dbg - ecryptfs cryptographic filesystem (utilities; debug)
 libecryptfs-dev - ecryptfs cryptographic filesystem (development)
 libecryptfs0 - ecryptfs cryptographic filesystem (library)
 python-ecryptfs - ecryptfs cryptographic filesystem (python)
Launchpad-Bugs-Fixed: 917509 922821 937331 938326 979350 994813 1007159
Changes: 
 ecryptfs-utils (97-0ubuntu1) quantal; urgency=low
 .
   [ Kees Cook ]
   * src/pam_ecryptfs/pam_ecryptfs.c: LP: #938326
     - exit, rather than return to prevent duplicate processes
 .
   [ Andreas Raster ]
   * src/desktop/ecryptfs-find:
     - $mounts was quoted once too often
 .
   [ George Wilson ]
   * src/key_mod/ecryptfs_key_mod_openssl.c,
     src/key_mod/ecryptfs_key_mod_pkcs11_helper.c,
     src/key_mod/ecryptfs_key_mod_tspi.c: LP: #937331
     - IBM would like to grant a license exception for key modules that
       require linking to OpenSSL. The change should make the modules
       shippable by Linux distributions
 .
   [ Dustin Kirkland ]
   * debian/copyright:
     - note the GPLv2 SSL exception granted by IBM for the key modules
   * debian/control, debian/copyright, doc/manpage/ecryptfs.7,
     doc/manpage/ecryptfs-add-passphrase.1, doc/manpage/ecryptfsd.8,
     doc/manpage/ecryptfs-generate-tpm-key.1, doc/manpage/ecryptfs-
     insert-wrapped-passphrase-into-keyring.1, doc/manpage/ecryptfs-
     manager.8, doc/manpage/ecryptfs-mount-private.1,
     doc/manpage/ecryptfs-recover-private.1, doc/manpage/ecryptfs-rewrap-
     passphrase.1, doc/manpage/ecryptfs-rewrite-file.1,
     doc/manpage/ecryptfs-setup-private.1, doc/manpage/ecryptfs-setup-
     swap.1, doc/manpage/ecryptfs-stat.1, doc/manpage/ecryptfs-umount-
     private.1, doc/manpage/ecryptfs-unwrap-passphrase.1,
     doc/manpage/ecryptfs-wrap-passphrase.1,
     doc/manpage/mount.ecryptfs.8, doc/manpage/mount.ecryptfs_private.1,
     doc/manpage/pam_ecryptfs.8, doc/manpage/umount.ecryptfs.8,
     doc/manpage/umount.ecryptfs_private.1, README,
     src/utils/mount.ecryptfs.c:
     - use the new ecryptfs.org website where appropriate
   * debian/control:
     - update to suggest zescrow-client
   * precise
 .
   [ Sergio Peña ]
   * src/libecryptfs/cipher_list.c: LP: #922821
     - add the new name of the blowfish cipher (linux >= 3.2)
   * src/include/ecryptfs.h, src/libecryptfs/main.c,
     src/utils/mount.ecryptfs.c: LP: #917509
     - use execl() to mount ecryptfs
     - this allows us to support any arbitrary mount options in
       /etc/fstab
 .
   [ Tyler Hicks ]
   * doc/manpage/ecryptfs.7:
     - Remove the note saying that the passphrase and openssl key modules are
       available by default. That's true upstream but not always true in distro
       builds.
   * tests/run_tests.sh:
     - Make upper and lower mount point arguments optional by automatically
       creating directories in /tmp by default.
     - Make it possible to run only userspace tests without having to specify
       unused mount information
     - Accept a comma-separated list of lower filesystems to test on and loop
       through all kernel tests for each lower filesystem
     - Accept a comma-separated list of tests to run
   * tests/lib/etl_funcs.sh:
     - Unset $ETL_DISK just before etl_remove_disk() successfully returns
   * tests/userspace/Makefile.am:
     - Also build 'make check' tests when building with --enable-tests
   * include/ecryptfs.h, libecryptfs/Makefile.am,
     libecryptfs/cipher_list.c, libecryptfs/module_mgr.c,
     utils/io.h: LP: #994813
     - remove overly complicated implementation to detect what ciphers
       are supported by the currently running kernel's crypto api
     - prompt for the entire supported cipher list, if the user selects a
       cipher that their kernel doesn't support, the mount will fail
       and the kernel will write an error message to the syslog
   * src/libecryptfs/module_mgr.c:
     - Use correct blowfish block size when displaying supported ciphers to
       the user
   * tests/kernel/lp-1009207.sh, tests/kernel/Makefile.am,
     tests/kernel/tests.rc:
     - Add simple test case for incorrect handling of umask and default POSIX
       ACL masks
   * tests/kernel/lp-994247.sh, tests/kernel/lp-994247/test.c,
     tests/kernel/Makefile.am, tests/kernel/tests.rc:
     - Add test case for incorrect handling of open /dev/ecryptfs file
       descriptors that are passed or inherited by other processes
 .
   [ Colin King ]
   * tests/lib/etl_funcs.sh:
     - etl_lumount() should use DST rather than SRC dir so it can run on Lucid
     - use file system appropriate mkfs force flag
     - cater for correct ext2 default mount flags
   * tests/kernel/lp-509180.sh, tests/kernel/lp-509180/test.c:
     - test for trailing garbage at end of files
   * tests/kernel/lp-524919.sh, tests/kernel/lp-524919/test.c:
     - test case for checking lstat/readlink size
   * tests/kernel/lp-870326.sh, tests/kernel/lp-870326/test.c:
     - test case for open(), mmap(), close(), modify mmap'd region
   * tests/kernel/lp-469664.sh:
     - test case for lsattr
   * tests/kernel/lp-613873.sh:
     - test case for stat modify time
   * tests/kernel/lp-745836.sh:
     - test case for clearing ECRYPTFS_NEW_FILE flag during truncate
   * tests/lib/etl_funcs.sh, tests/kernel/extend-file-random.sh,
     tests/kernel/trunc-file.sh (LP: #1007159):
     - Add test library function for estimating available space in lower fs
     - Use new library function in tests that need to create large files
 .
   [ Colin Watson ]
   * src/utils/ecryptfs-setup-swap: Skip /dev/zram* swap devices
     LP: #979350
 .
   [ Serge Hallyn ]
   * src/utils/mount.ecryptfs_private.c:
     - EoL fixes
Checksums-Sha1: 
 04724cdcfb811892f21015f2b9ad26c9f72625e2 2320 ecryptfs-utils_97-0ubuntu1.dsc
 c0f3fcaeabdcc295ff10cfd54f7286e8ec0bb280 613364 ecryptfs-utils_97.orig.tar.gz
 fab062a32643a46c9d20c44d93be1fa5c3244c68 21737 ecryptfs-utils_97-0ubuntu1.debian.tar.gz
Checksums-Sha256: 
 4c1a6c968ff06e6bcf94e2a5146bbbd5e3b6fce32f0a440cb898072426cb7f12 2320 ecryptfs-utils_97-0ubuntu1.dsc
 322c1eb6805ea71e75d5699a622ab8e710718bef3b64ce6df144e08fe090fdd6 613364 ecryptfs-utils_97.orig.tar.gz
 09fd73aa18dda4086f2333445bd68bc8f3e3908298503f4090f705997c1513c5 21737 ecryptfs-utils_97-0ubuntu1.debian.tar.gz
Files: 
 1a2b3267ffed9a30bf172f9cb58db820 2320 misc optional ecryptfs-utils_97-0ubuntu1.dsc
 74e8cacd5fa641075419ec02f6312421 613364 misc optional ecryptfs-utils_97.orig.tar.gz
 b8a42955ce2debf8042b24caeebc5e71 21737 misc optional ecryptfs-utils_97-0ubuntu1.debian.tar.gz
Original-Maintainer: Daniel Baumann <daniel at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=QVK8
-----END PGP SIGNATURE-----

More information about the Quantal-changes mailing list