Milan Broz
6127b6959f
Update copyright year on changed files.
2013-03-24 09:05:33 +01:00
Milan Broz
f64064fe71
Fix deactivation of device when failed underlying node disappeared
...
If underlying device disappears (failed drive, removed flash drive etc)
cryptsetup cannot report LUKS parameters (header no longer available).
Fix return code of init_by name in this situation (crypt
context is NULL).
Report visible error if deactivation fails and device is still busy.
Fixes issue#149.
2013-03-17 20:54:04 +01:00
Milan Broz
f2521889c2
Deactivate whole device TCRYPT tree if context is NULL
...
API (unfortunately) supports NULL argument for crypt_deactivate,
with new chained TCRYPT devices it must deactivate all
chained devices as well.
Fixes issue#147.
2013-03-17 19:20:42 +01:00
Milan Broz
72db6e4de2
Do not support user uuid for plain & loopaes devices.
...
This function was not documented.
So now crypt_get_uuid() returns only on-disk UUID.
2013-01-22 16:20:09 +01:00
Milan Broz
29f21208a0
Change License from GPLv2 only to GPLv2+ ("or any later").
...
Agreed by all copyright authors.
2012-12-29 11:33:54 +01:00
Milan Broz
3b4424226f
Fix non-translated messages.
2012-12-29 11:11:23 +01:00
Milan Broz
83f02e6682
Add copyright line for files I have written or modified.
2012-12-21 16:40:33 +01:00
Milan Broz
80d21c039e
Fix some problems found by Coverity scan.
2012-12-10 17:28:52 +01:00
Milan Broz
549ab64358
TCRYPT: properly wipe all buffers; use prefix for all functions.
2012-12-10 16:36:22 +01:00
Milan Broz
e8d09733d4
Require params for crypt_load & TCRYPT type.
2012-12-08 01:31:38 +01:00
Milan Broz
5dc654433c
Disallow header restore if context is nonLUKS device.
2012-12-07 15:55:56 +01:00
Milan Broz
05af3a3383
Move change key into library (add crypt_keyslot_change_by_passphrase).
...
This change is useful mainly in FIPS mode, where we cannot
extract volume key directly from libcryptsetup.
2012-12-07 15:33:47 +01:00
Milan Broz
95daec798b
Use union instead of replicated attributes.
2012-12-03 16:17:43 +01:00
Milan Broz
a4585423fd
Remove some gcc extra warnings (signed/unsigned problems etc).
2012-12-02 23:13:59 +01:00
Milan Broz
21756a1969
TCRYPT: fix activation and hidden device offsets.
2012-11-27 17:13:53 +01:00
Milan Broz
c81260b3c3
TCRYPT: add dump command
2012-11-23 17:10:57 +01:00
Milan Broz
8d69e19ac1
TCRYPT: support crypt_volume_key_get
2012-11-23 15:20:46 +01:00
Milan Broz
6ab93841e9
TCRYPT: show proper device in status for chained mode
2012-11-23 13:46:23 +01:00
Milan Broz
52cbbdaf38
TCRYPT: move all header handling into library.
...
Add warning about unsupported modes.
2012-11-23 13:01:43 +01:00
Milan Broz
0996a43dbb
TCRYPT: parse cipher chain on init.
2012-11-22 17:28:03 +01:00
Milan Broz
3faaa8b227
TCRYPT: support proper device removal
2012-11-22 14:19:43 +01:00
Milan Broz
911ffe81f0
TCRYPT: implement (most of) legacy modes support.
2012-11-19 21:25:57 +01:00
Milan Broz
ecf993834c
TCRYPT: support keyfiles
2012-11-19 21:25:26 +01:00
Milan Broz
3cbb43a73a
Add basic TCRYPT library.
2012-11-19 21:24:59 +01:00
Milan Broz
db97d3d8c8
Add simple cipher benchmarking.
2012-11-19 21:22:43 +01:00
Milan Broz
89e09afdf6
Fix some problems found by Coverity static analysis.
2012-09-19 13:58:00 +02:00
Milan Broz
f45d4d0755
Add crypt_keyslot_area() API call.
...
Useful if you want to analyze/wipe area of disk used for keyslot
from external tool.
2012-09-11 11:59:06 +02:00
Milan Broz
1d5788f779
Set context for DM log for all DM backend entries.
...
Try to handle error if run as non-root user better.
2012-08-14 19:17:13 +02:00
Milan Broz
97224b072a
Add context to DM helpers.
...
(To be used later.)
2012-08-14 16:25:21 +02:00
Milan Broz
07815c24cd
Print better error message if device is read-only etc.
2012-08-13 16:54:41 +02:00
Milan Broz
65f975655c
New device access backend.
...
Allocate loop device late (only when real block device needed).
Rework underlying device/file access functions.
Move all device (and ioctl) access to utils_device.c.
Allows using file where appropriate without allocation loop device.
2012-08-12 22:00:17 +02:00
Milan Broz
5f7309bfa0
Add some verity api test.
...
Fix set_data_device bug it uncovered.
Fix api-test for nonFIPS hash.
2012-07-09 18:09:51 +02:00
Milan Broz
5c7954a0c7
Require only up to last keyslot area for header device (ignore data offset).
...
Fix header backup and restore to work on files with large data offset.
2012-06-11 12:20:19 +02:00
Milan Broz
62f334cfa5
Check various number limits.
2012-06-11 00:09:15 +02:00
Milan Broz
4b8f91d0d9
Remove some compilation warnings.
2012-06-10 18:56:04 +02:00
Milan Broz
a14aab5df7
Loop is automatically allocated in crypt_set_data_device().
2012-06-10 17:59:14 +02:00
Milan Broz
1cbc53e8ee
Get rid of backing_file in struct.
2012-06-10 17:19:08 +02:00
Milan Broz
db51a343de
Move defines from header.
2012-06-09 23:26:45 +02:00
Milan Broz
e2375c8368
Add verity uuid specification.
2012-06-09 23:20:43 +02:00
Milan Broz
697c6c9324
Prepare new superblock format.
2012-06-09 22:02:06 +02:00
Milan Broz
6d07be898d
Enhance status of active device.
2012-06-09 18:28:00 +02:00
Milan Broz
ade21e6c60
Support empty salt for verity, support no superblock.
2012-06-09 13:12:04 +02:00
Milan Broz
fcf5b414d6
Remove redundant flags.
2012-06-09 11:54:10 +02:00
Milan Broz
ce2218ed65
Support init_by_name for verity.
2012-06-08 16:38:26 +02:00
Milan Broz
c4b16923bb
Unify dm backend for crypt/verity.
2012-06-08 10:12:12 +02:00
Milan Broz
b016e65daa
Use union in dm (crypt/verity) query structure.
2012-06-08 08:58:35 +02:00
Milan Broz
4b0b82adc5
Rewrite veritysetup to use libcryptsetup.
2012-06-07 00:18:49 +02:00
Milan Broz
20eea64334
Add version string to crypto backend.
...
Move fips check to libcryptsetup.
Clean up internal.h use.
2012-05-27 00:48:10 +02:00
Milan Broz
ed1ab3e498
Fix clang compile warnings (error path).
2012-05-22 14:54:52 +02:00
Milan Broz
45e0942755
Add --enable-fips for linking with fipscheck library.
...
Initialize binary and library selfcheck if running in FIPS mode.
(Actually available only on Fedora/Red Hat distros.)
2012-05-21 14:09:57 +02:00
