Milan Broz
2ef2f6017d
Update release notes.
2022-11-24 13:49:27 +01:00
Ondrej Kozina
cdfa213ad0
Allocate internal buffer in LUKS2 keyring token with crypt_safe_alloc.
...
With changes in db65a5ceac
2022-11-24 09:03:29 +00:00
Milan Broz
dab00bfd4f
CI: use libsepol-dev for Debian based distros.
...
Seems libselpol1-dev is disappearing.
2022-11-23 11:57:59 +00:00
Ondrej Kozina
c018558f2d
Remove unused define CRYPT_KC_TYPE_UNDEFINED.
...
The defined was not yet released in stable version.
2022-11-23 11:08:55 +01:00
Milan Broz
3633b81909
CI: fix GutHub action install script
2022-11-22 16:38:10 +01:00
Yuri Chornoivan
b23a02b05c
po: update uk.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Jakub Bogusz
347c39ca97
po: update pl.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Hiroshi Takekawa
2d1f1833e8
po: update ja.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Frédéric Marchal
7f09ab67e2
po: update fr.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Roland Illig
f5fb1f1b94
po: update de.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Petr Pisar
005141554f
po: update cs.po (from translationproject.org)
2022-11-22 16:17:48 +01:00
Ondrej Kozina
cd8f80b7ee
Clarify type requirements in crypt_volume_key_get_by_keyslot_context.
2022-11-21 15:56:14 +01:00
Milan Broz
c7bbae01a6
Fix some strings for translations.
...
No need to translate debug strings.
Fix spaces in key slot queries.
2022-11-20 12:36:26 +01:00
Milan Broz
257bc80ae9
Version 2.6.0-rc0.
2022-11-18 22:32:47 +01:00
Milan Broz
6c2e64bf75
fvault2: fix typo
2022-11-18 22:25:31 +01:00
Milan Broz
942cea1803
Update pot file.
2022-11-18 22:22:06 +01:00
Milan Broz
e7eab5fec2
Prepare version 2.6.0-rc0.
2022-11-18 22:02:44 +01:00
Ondrej Kozina
b0779c6529
Fix --disable-luks2-reencryption configuration option.
2022-11-18 16:40:48 +01:00
Milan Broz
37d045df00
fvault2: add basic info to cryptsetup man page
2022-11-18 15:27:00 +01:00
Milan Broz
4b95f36804
Fix possible undefined use od preprocessor.
...
Mixing preprocessor #if and code is undefined behavior in general,
rewrite tools_package_version to not use it.
2022-11-18 14:50:34 +01:00
Milan Broz
faf3b27f51
fvault2: reduce debug log, do not print ignored metadata blocks
2022-11-18 14:31:25 +01:00
Josef Andersson
c85d1351ea
po: update sv.po (from translationproject.org)
2022-11-18 14:25:40 +01:00
Мирослав Николић
3b18fe2b23
po: update sr.po (from translationproject.org)
2022-11-18 14:25:40 +01:00
Milan Broz
e96588b8b5
Check and allocate header early so wipe fails only for IO errors.
...
The device_check is done in header write functions,
but these are not recached in normal format path as wipe call
is called earlier.
Call the device check also from wipe function to get better error
description.
This situation happens for example when a block device is too small
(regular file can be enlarged by falloc(); block device cannot).
2022-11-18 13:03:52 +00:00
Milan Broz
c31494abc6
Print warning early if LUKS container is too small for activation.
...
Activation with header only fails too late (in device-mapper
call) while it is clear from the beginning that it cannot succeed.
Just add an early and better worded error.
Ignore this situation for block device (we have to call ioctl to get size).
The most common case is a file container here anyway.
For block devices it fails during activation later.
2022-11-18 13:03:52 +00:00
Milan Broz
819902a33a
Add a better warning if luksFormat ends with image without any space for data.
...
Header write can call falloc() to increase image size, so we should
check data offset after header is written.
Also change wording to be less cryptic and describe what is the real problem.
Note that the code can be used this way to crate detached header (without
space for data), so it is not an error.
2022-11-18 13:03:52 +00:00
Daniel Zatovic
395beb635c
Speed up tests using faster hash and PBKDF options.
...
Use faster SHA1 instead of SHA256 in reencryption test and pass fast
PBKDF options in mode-test.
2022-11-18 11:08:31 +00:00
Ondrej Kozina
81c56a8395
Move assert include in internal header files.
2022-11-16 16:54:33 +01:00
Milan Broz
3333f3e9bb
Fix some warning detected by Coverity.
...
The FVAULT2 block is always 8192 bytes (for CRC), but used
struct is smaller. Let's not confuse struct size with whole block.
2022-11-15 10:47:22 +01:00
Milan Broz
b086430877
fvault2: Move messages to debug level and add more debug log.
2022-11-14 21:50:18 +01:00
Milan Broz
01f3f3e66c
fvault2: volume size can be unsigned 64bit
2022-11-14 21:50:18 +01:00
Milan Broz
e37d8bdf91
fvault2: harden device offset check
...
Check if value overflows and do not allow reading
metadata block exceeding fixed offset.
2022-11-14 21:50:18 +01:00
Milan Broz
8b4a5e5931
fvault2: some more code cleanup.
2022-11-14 21:50:18 +01:00
Milan Broz
33d8d19408
fvault2: passphr -> passphrase
2022-11-14 21:50:18 +01:00
Milan Broz
9bb98d49c0
fvault2: some minor code reformatting changes.
2022-11-14 21:50:18 +01:00
Pavel Tobias
1c5fd5ae10
Fvault2: add basic error logs
2022-11-14 21:50:18 +01:00
Milan Broz
3d1b965c46
fvault2: fix --test-passphrase option
2022-11-14 21:50:18 +01:00
Milan Broz
2770273582
fvault2: test volume key dump
2022-11-14 21:50:18 +01:00
Milan Broz
f6b6e41951
fvault2: Add a basic man page.
2022-11-14 21:50:18 +01:00
Milan Broz
03059fae75
tests: add valgrind support to fvault2 test.
2022-11-14 21:50:18 +01:00
Pavel Tobias
ba9757b14b
Fvault2: add basic test
2022-11-14 21:50:18 +01:00
Pavel Tobias
cd5bd1c773
Fvault2: store UUIDs in text format
2022-11-14 21:50:18 +01:00
Vojtech Trefny
a5c7bba6ee
Add missing support for fvault2 commands
2022-11-14 21:50:18 +01:00
Vojtech Trefny
4bce6d5962
Show error when trying to run fvault2Dump on a non-fvault device
2022-11-14 21:50:18 +01:00
Pavel Tobias
cb9deaf354
Fvault2: implement open
2022-11-14 21:50:18 +01:00
Pavel Tobias
0ce5de9c1c
Fvault2: implement dump
2022-11-14 21:50:18 +01:00
Pavel Tobias
35071c6d50
Fvault2: derive volume key
2022-11-14 21:50:18 +01:00
Pavel Tobias
af6ea01997
Fvault2: read all relevant metadata from device
2022-11-14 21:50:18 +01:00
Pavel Tobias
1d5d6d73a5
Add support for CRC-32C (Castagnoli polynomial) to lib/crypto_backend
2022-11-14 21:50:18 +01:00
Pavel Tobias
1ffc9d967c
Fvault2: prepare module in libcryptsetup
2022-11-14 21:50:18 +01:00
