Some feedback on the new menus.

Ilkka Tuohela hile at nixu.com
Wed Dec 15 02:12:53 CST 2004


ke, 2004-12-15 kello 08:19 +0100, Jean Privat kirjoitti:
> > - Places menu
> 
> Why not simply rename the menu "Files" ? Files are the common
> denominator between directories, mounted devices, recent files and file
> search.
> 
> Here a other Files (or keep Places if you do not like Files :) ) menu I
> suggest:
> 
> Files
>     Home
>     Desktop
>     [Personal GtkFileChooser Bookmarks]
>     ---
>     Computer
>     [Mounted disks]
>     ---
>     Network
>     Connect to a server...
>     [Connected networks]
>     ---
>     Search for Files...
>     Recent Documents
> 

This looks great, and brings a question to my mind (not directly ubunt
question but...). are there any plans to support mounting encrypted
partitions from ubuntu version of gnome? I think this would need
somethink like following:

- gonme-vfs has to parse /etc/crypttab for dm-encrypted partitions and
  /etc/fstab lines for option encryption, which is used for loopback
  encryption
- The fact that the partition is encrypted must be available from vfs 
  to upper layers, and the calls to mount must support passing a 
  passphrase
- Preferably the VFS attach attempt should do the following:
  - Setup the device with the passphrase
  - Check if we can find a filesystem there or not
    - If a FS is found the passphrase was valid -> mount it
    - IF no FS is found, the passphrase was invalid -> remove mapping
- We should make it possible to store this passphrase to keyring as 
  usual
- Any mount request should pop up a window asking for the passphrase, 
  and before asking it we check the keyring if it's already there and
  try using this passphrase.

All this should be written to gnome-vfs in system-independent ways. What
I describe above works directly with FreeBSD's GBDE-encryption, except
it is  more advanced (can have multiple keys, does not require checking
if there is FS because the gbde attach command returns failure if the 
passphrase is incorrect, etc. etc.)

I think support for dm-based encryption is enough, because cryptoloop
will be AFAIK dropped from 2.6.x anyway: at least, dm-based should be
higher priority.

- DM-crypt example (the future)
# cat /etc/crypttab
cryptostick      /dev/sda4
# grep /dev/mapper/cryptostick /etc/sftab
/dev/mapper/cryptostick /media/usbstick-encrypted xfs rw,user,noauto 0 0

- Fstab line with loopback encryption (will go away)
/dev/sda4 /media/foo-crypted xfs rw,user,noauto,encryption=aes 0 0

As I said, this should be gnome-devel, not ubuntu-devel... but I bring
it up here because I think support for encryption is important with
laptops, and ubuntu could lead the desktop support if we just want.
Making the installer support cryptsetup is another thing, which should
be done as well at some point, all the way from encrypted root fs.

Anyway, I'll checkout gnome-vfs tree and start looking at it ;)

	*hile*






More information about the ubuntu-devel mailing list