eessppeelllloo/cryptsetup
1
0
Fork 0
mirror of https://gitlab.com/cryptsetup/cryptsetup.git synced 2025-12-19 14:50:09 +01:00
Code Issues Packages Projects Releases Wiki Activity

Abort LUKS2 reencryption early if OPAL device used.

Browse Source
This commit is contained in:
Ondrej Kozina
2023-11-01 12:53:48 +01:00
parent 89e0ef96c2
commit 029d4bdd57
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/utils_reencrypt.c
View File

@@ -417,6 +417,11 @@ static bool luks2_reencrypt_eligible(struct crypt_device *cd)
return false; return false;
} }
if (flags & CRYPT_REQUIREMENT_OPAL) {
log_err(_("Can not reencrypt LUKS2 device configured to use OPAL."));
return false;
}
/* raw integrity info is available since 2.0 */ /* raw integrity info is available since 2.0 */
if (crypt_get_integrity_info(cd, &ip) || ip.tag_size) { if (crypt_get_integrity_info(cd, &ip) || ip.tag_size) {
log_err(_("Reencryption of device with integrity profile is not supported.")); log_err(_("Reencryption of device with integrity profile is not supported."));