Ondrej Kozina
f787eafd8a
drop duplicate default segment define
2017-11-30 16:54:06 +01:00
Milan Broz
9588a961d6
Do not alloc tcrypt keyfileon stack.
...
The keyfile has 1MB, it is better to run malloc for this code.
2017-11-24 13:45:21 +01:00
Ondrej Kozina
88758703fa
test: update luks2 validation tests
2017-11-23 16:18:27 +01:00
Ondrej Kozina
3c839f44d8
luks2: fix off-by-one error in uint64 validation
2017-11-23 16:18:19 +01:00
Ondrej Kozina
304bdd7d0d
luks2: add json_object_new_uint64 wrapper
...
json doesn't support 64 bits integers. We workaround it by storing
large numbers as string and validate the value internally.
2017-11-23 16:18:14 +01:00
Ondrej Kozina
382d27b4dc
remove unused function
2017-11-23 16:17:07 +01:00
Milan Broz
b80278c04f
Ignore device opt-io alignment if it is not multiple of minimal-io.
...
Some USB enclosures seems to report bogus topology info.
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1513820
2017-11-21 15:39:36 +01:00
Ondrej Kozina
7d4fcfa191
fix memleaks on integrity format error path
2017-11-19 10:01:59 +01:00
Ondrej Kozina
ad3fe00dea
fix memleaks on verity format error path
2017-11-19 09:51:59 +01:00
Milan Broz
f507d16baa
Update bundled Argon2 source.
2017-11-14 12:07:53 +01:00
Milan Broz
dcce2edc4f
Fix integrity setup test journal watermark setting.
2017-11-14 09:31:33 +01:00
Milan Broz
e7e1e7a0a3
Update po files.
2017-11-13 19:57:59 +01:00
Milan Broz
68f4485cdd
Fix deactivation of standalone integrity device.
2017-11-13 19:57:16 +01:00
Guilhem Moulin
d93ac3c496
Remove libargon2 code from source tree
...
[mbroz: fix for make distcheck]
2017-11-08 10:51:58 +01:00
Andrea Gelmini
a97de38b6b
Fix typos.
2017-11-08 10:22:49 +01:00
Milan Broz
444eac3597
Update po files.
2017-11-08 09:56:32 +01:00
Ondrej Kozina
1f01c76fa5
fix memory leak on failed luks2 activation
2017-11-03 17:30:14 +01:00
Milan Broz
16da1a5c88
Version 2.0.0-rc1.
2017-11-01 10:41:35 +01:00
Milan Broz
e514d1201d
Use hardcoded location for distcheck tmpfiles.d.
2017-11-01 08:57:41 +01:00
Milan Broz
eb0293a637
And also define AS_VAR_COPY for old automake.
2017-10-31 21:46:55 +01:00
Milan Broz
03581fc8cc
Define PKG_CHECK_VAR for old pkg-config <= 0.28
2017-10-31 21:40:49 +01:00
Milan Broz
246cf0df26
Add Travis compile only option.
2017-10-31 21:18:04 +01:00
Milan Broz
cf1d6461cb
Do not rename tmpfile config but use it directly.
2017-10-31 21:11:25 +01:00
Ondrej Kozina
9bcc97bc5e
install cryptsetup_tmpfiles.conf
...
add --with-tmpfilesdir configuration option. Use the option
either to override default systemd tmpfiles.d directory location
or to specify install location for systems without systemd.
2017-10-31 20:50:39 +01:00
Milan Broz
3bc124d9d3
Switch to rc1 version.
2017-10-31 11:00:37 +01:00
Ondrej Kozina
764ae2a489
man: update cryptsetup-reencrypt for LUKS2 format
2017-10-30 21:13:59 +01:00
Ondrej Kozina
e678d5ae8e
test: drop useless luks2 test image
2017-10-30 16:09:40 +01:00
Ondrej Kozina
13b1720899
reencrypt: add message about using default parameters with LUKS2
2017-10-30 16:09:36 +01:00
Ondrej Kozina
35512f4ee9
cryptsetup-reencrypt: internal safeguard against mistakes
2017-10-30 16:09:33 +01:00
Milan Broz
e55f10a8f1
Decrease size of another testing LUKS2 images.
2017-10-29 18:53:16 +01:00
Milan Broz
b187e499a4
Decrease size of testing images.
2017-10-29 18:29:35 +01:00
Milan Broz
dd397a9957
Fix Makefile example after automake changes.
2017-10-29 16:31:49 +01:00
Daniel Reichelt
cdfed8fabc
fix typo in usage text for veracrypt pim parameters
2017-10-29 09:06:37 +01:00
Ondrej Kozina
759577ad9b
tests: LUKS2 reencrypt tests
2017-10-28 23:26:11 +02:00
Ondrej Kozina
356402942f
luks2: adapt reencrypt to luks2 version
...
TODO: currently there's no way to change pbkdf to non-default for LUKS2
2017-10-28 22:35:21 +02:00
Ondrej Kozina
76947fa835
luks2: add offline reencrypt requriement
2017-10-28 22:29:28 +02:00
Milan Broz
f7dadfb646
Fix some benign compiler warnings.
2017-10-28 14:12:25 +02:00
Milan Broz
4e31595c7a
Enable build of cryptsetup-reencrypt by default.
2017-10-28 14:08:26 +02:00
Milan Broz
31779c0763
Fix memory leak in LUKS2 requirements handling for restore context.
2017-10-28 12:01:02 +02:00
Milan Broz
6e3622e0f1
Fix some warning and leaks in api test code.
2017-10-28 11:59:06 +02:00
Milan Broz
b78bd4ccce
Add new valgrind tests.
2017-10-27 22:39:50 +02:00
Milan Broz
a10059d531
Fix memory leak in verity device destructor.
2017-10-27 21:45:54 +02:00
Milan Broz
1f2ce01c08
Fix a memory leak of key description for integrity device.
2017-10-27 15:58:33 +02:00
Milan Broz
fb5a70a663
Fix memory leak in integrity device query processing.
2017-10-27 15:18:10 +02:00
Milan Broz
d62d0ed076
Add configure option to disable build of cryptsetup tool.
...
You can use --disable-cryptsetup to not build cryptsetup binary.
2017-10-25 11:47:45 +02:00
Michal Virgovic
a4b9ce13ee
Enable valgrind in veritysetup tests.
2017-10-20 10:45:11 +02:00
Michal Virgovic
43ee152eb4
Enable valgrind in integritysetup tests.
2017-10-20 08:56:21 +02:00
Michal Virgovic
fee909deee
Add tests for integritysetup journal parameters.
2017-10-19 09:00:13 +02:00
Milan Broz
702bcb8684
Fail if integrity option is used with LUKS1 format.
2017-10-17 10:37:17 +02:00
Ondrej Kozina
961e65424e
crypt_deactivate: fail earlier when holders detected
...
crypt_deactivate_* fail earlier without noisy dm retries
when other device holders detected. The early detection
works if:
a) other device-mapper device has a hold reference on the
device
- or -
b) mounted fs is detected on the device
Any deactivation flag CRYPT_DEACTIVATE_FORCE or
CRYPT_DEACTIVATE_DEFERRED will disable this detection
2017-10-17 10:03:17 +02:00
