Commit Graph

  • 3dcb532bd3 verity: Check hash device size in advance Milan Broz 2025-05-15 16:23:42 +02:00
  • 02a48caf7e Print better error message for unsupported LUKS2 AEAD device resize. Milan Broz 2025-05-15 15:49:28 +02:00
  • bc6c3092fa ci: call dnf clean all before install Milan Broz 2025-05-12 13:45:25 +02:00
  • 0cf87a4151 Add support for --decrypt init by keyslot contexts. Ondrej Kozina 2025-04-25 22:13:40 +02:00
  • cf29d51589 Refactor activation by volume key(s) in helper routine. Ondrej Kozina 2025-04-25 21:47:43 +02:00
  • 8fcd8a78d8 Make changes in token unlock for further changes in reencrypt action. Ondrej Kozina 2025-04-25 18:31:39 +02:00
  • 5f48657f4d Move try_token_unlock to luks utils. Ondrej Kozina 2025-04-25 18:22:26 +02:00
  • 4493d9ad3e Switch reencrypt --encrypt initialization to keyslot context. Ondrej Kozina 2025-04-25 18:06:05 +02:00
  • 9f0dd9cc4c Move init_keyslot_context in luks utils. Ondrej Kozina 2025-04-25 17:23:05 +02:00
  • 261bef3409 Fix mistake in reencryption change detection logic. Ondrej Kozina 2025-04-17 11:02:34 +02:00
  • ff7a21eb94 Refactor get_adjusted_key_size. Ondrej Kozina 2025-04-17 10:49:57 +02:00
  • 48683f7316 Fix memory leak on error path in luksAddKey. Ondrej Kozina 2025-05-07 15:50:22 +02:00
  • e48d5b6d19 Verify volume key passed by kernel keyring. Ondrej Kozina 2025-05-07 15:47:11 +02:00
  • 723ad6afdf Print error message in cryptetup cli. Ondrej Kozina 2025-05-09 10:45:31 +02:00
  • 79d8a8b840 Drop error message about mismatching volume key. Ondrej Kozina 2025-05-07 15:31:15 +02:00
  • 5f8cab5d4a FAQ: add volume key example. Milan Broz 2025-05-11 21:20:44 +02:00
  • dd68e53082 ci: check FIPS mode without fips-mode-setup Milan Broz 2025-05-01 17:27:36 +02:00
  • 9153c9c3c0 Fix unused PIM query actions list. Milan Broz 2025-04-23 17:01:03 +02:00
  • c1b5e412c9 Drop unreachable error message. Ondrej Kozina 2025-04-25 16:34:05 +02:00
  • fa84cb8a55 Fix LUKS2_config_get_requirements prototype. Ondrej Kozina 2025-04-25 15:49:19 +02:00
  • 221d6ac345 ci: disable rhel10-fips job Milan Broz 2025-04-27 14:09:45 +02:00
  • d2fc31da28 ci: update compiler versions Milan Broz 2025-04-08 16:16:22 +02:00
  • 8b14558b94 ci: Run lintian and codespell. Milan Broz 2025-04-08 15:30:44 +02:00
  • e936d4395b Opal: limit PSID keyfile read if not set otherwise Milan Broz 2025-04-22 13:57:51 +02:00
  • b166747fee ci: Run rawhide csmock. Milan Broz 2025-03-25 22:21:10 +01:00
  • 3e114bcb1e Fix warning about NULL argument in setsockopt() Milan Broz 2025-02-21 14:55:19 +01:00
  • 1df9a4c566 Fix dirfd() handling. Milan Broz 2025-02-21 14:43:49 +01:00
  • 7f0724f46c Opal2: Do not use IOC_OPAL_ERASE_LR Milan Broz 2025-03-24 08:54:44 +01:00
  • c8420de4d6 tests: Disable csmock jobs Milan Broz 2025-03-20 10:04:58 +01:00
  • a0b4ae7e27 po: update zh_CN.po (from translationproject.org) Mingye Wang (Artoria2e5) 2025-03-23 14:42:57 +01:00
  • 4b39379c5b po: update sr.po (from translationproject.org) Мирослав Николић 2025-03-23 14:42:57 +01:00
  • 70f0938fff tests: disable broken OPAL HW Milan Broz 2025-03-20 13:57:32 +01:00
  • fbb8d2e910 Revert "Add temporary workaround for broken kernels since 6.14-rc3." Ondrej Kozina 2025-03-19 14:22:43 +01:00
  • 9e6fcefefc Remove redundant --verify-passphrase in man. Milan Broz 2025-03-07 19:34:19 +01:00
  • bf5d56d804 tests: Add a BITLK test image with two recovery passphrases Vojtech Trefny 2025-03-09 11:23:48 +01:00
  • c1b7ad8979 Fix the debug message for too large json data during write. Ondrej Kozina 2025-03-05 14:45:19 +01:00
  • fcf266667b Add validation tests for json area in non compact version. Ondrej Kozina 2025-03-04 16:48:28 +01:00
  • cb0f568932 Optimize LUKS2 metadata writes. Ondrej Kozina 2025-02-10 14:13:05 +01:00
  • 000f03ad31 Switch to crypt_jobj_to_string_on_disk(). Ondrej Kozina 2025-02-06 13:59:11 +01:00
  • 07e8628940 Add helper to unify json string format. Ondrej Kozina 2025-02-06 13:53:03 +01:00
  • fdb179ea8b verity: Avoid false positive unititialized warning. Milan Broz 2025-03-07 14:43:57 +01:00
  • b91aee46c1 Use lower level code for droping signature from kernel keyring. Ondrej Kozina 2025-02-20 15:25:39 +01:00
  • eccccfd9b5 Fix drop of volume key from kernel keyring on crypt_suspend. Ondrej Kozina 2025-02-17 16:50:34 +01:00
  • 2dc886053f Drop unused temporary volume key helpers. Ondrej Kozina 2025-02-14 15:53:01 +01:00
  • 0a6ee8633a Switch to volume key keyring helpers. Ondrej Kozina 2025-02-04 15:45:18 +01:00
  • 15c4a410fd Add volume key helpers for manipulating kernel keys. Ondrej Kozina 2025-02-04 13:43:33 +01:00
  • 5615488196 Refactor and unify naming conventions for internal keyring helpers. Ondrej Kozina 2025-02-17 17:05:49 +01:00
  • c9edd942e8 Remove keyring_add_key_to_custom_keyring function. Ondrej Kozina 2025-02-24 14:02:00 +01:00
  • d792de66d5 Fix typo in comment. Milan Broz 2025-03-03 09:25:58 +01:00
  • 848f16bb5e man: Fix link for --allow-discards option explanation Vojtech Trefny 2025-03-05 12:33:49 +01:00
  • 8573eb515d Fix docstring for crypt_persistent_flags_set Vojtech Trefny 2025-03-06 14:11:15 +01:00
  • b2da80909a Add temporary workaround for broken kernels since 6.14-rc3. Ondrej Kozina 2025-03-06 14:14:45 +01:00
  • db57571906 Test invalid --luks2-keyslots-size value. Ondrej Kozina 2025-03-06 14:19:40 +01:00
  • 93bc8997ea tests: Fix targets/kernel version detection Milan Broz 2025-02-19 13:46:06 +01:00
  • 52c63b5de1 Note the need to omit separator characters from the PSID nl6720 2025-02-17 15:04:03 +02:00
  • dded9b3305 veritysetup: Support --error-as-corruption option. Milan Broz 2025-02-08 22:00:15 +01:00
  • 41b8b02ccf verity: Add support for restart/panic on error flag. Milan Broz 2025-02-08 18:01:26 +01:00
  • 7ee0b02967 Make test libdevmapper flags 64bit. Milan Broz 2025-02-06 15:39:40 +01:00
  • a3455befe7 Sync libdevmapper flags in tests. Milan Broz 2025-02-06 15:36:00 +01:00
  • f07854ab4f Make libdevmapper internal flags 64bit. Milan Broz 2025-02-06 15:34:03 +01:00
  • c497945ab3 Make internal dm_flags 64bit. Milan Broz 2025-02-06 12:34:43 +01:00
  • 036ed52999 Remove volume key internals from internal API. Ondrej Kozina 2025-02-04 16:04:49 +01:00
  • 1bec71dbe1 Add temporary helpers to indicate uploaded volume key. Ondrej Kozina 2025-02-12 16:55:07 +01:00
  • 9e0bcedbaa Harden LUKS2 volume key compare helper. Ondrej Kozina 2024-11-29 14:26:15 +01:00
  • 6123ea2e0b Add strict compare volume key comparison for non-LUKS2 devices. Milan Broz 2024-11-20 22:51:20 +01:00
  • f421ec0800 Simplify volume key compare helper. Ondrej Kozina 2024-11-27 14:33:55 +01:00
  • 843fac813f Indicate volume key with initialized key content. Ondrej Kozina 2024-11-27 14:23:02 +01:00
  • 6ee76934fa Harden and limit access to volume key internals. Ondrej Kozina 2025-02-03 16:59:19 +01:00
  • f86ab28ad6 Add crypt_safe_alloc_size helper. Ondrej Kozina 2025-02-03 16:57:42 +01:00
  • 54d937dfc7 Switch away from accessing volume key internals directly. Ondrej Kozina 2025-01-31 16:03:44 +01:00
  • fd9be9e777 Add severeal helpers (get methods) for volume key. Ondrej Kozina 2025-01-31 16:02:07 +01:00
  • 63f7dc739b fuzz: Better log from installation script Milan Broz 2025-02-15 14:57:19 +01:00
  • a2b2c6a8ae Add workaround for memory sanitizer that cannot recognize explicit_bzero. Milan Broz 2025-02-08 14:41:33 +01:00
  • 3899484be8 fuzz: Fix use of PWD variable. Milan Broz 2025-02-08 12:33:20 +01:00
  • a965a88992 Add const to pointer in blob_serialize() function. Ondrej Kozina 2025-01-31 15:59:22 +01:00
  • 88b3da6042 Use new crypt_generate_volume_key to generate weaker keys. Ondrej Kozina 2025-01-29 14:49:12 +01:00
  • 1326dfbac1 Add generic crypt_generate_volume_key function. Ondrej Kozina 2025-01-29 14:40:43 +01:00
  • 4f90213a5b Drop redundant member initialization in volume key. Ondrej Kozina 2025-01-29 14:01:53 +01:00
  • 5ee549de1e Remove volume_key struct from fvault2 code. Ondrej Kozina 2024-12-11 09:59:50 +01:00
  • e9073e6b19 Add keyring key type in volume key comparison function. Ondrej Kozina 2024-11-27 13:04:52 +01:00
  • dc75deff51 Drop bogus usage of vk->uploaded. Ondrej Kozina 2025-02-04 13:26:44 +01:00
  • ab9d4fec3b Do not parse emtpy '-' key string with null ciphers. Ondrej Kozina 2024-11-27 13:01:11 +01:00
  • da84c79a5b Use crypt_volume_key_next helper in bitlk. Ondrej Kozina 2025-02-04 16:02:50 +01:00
  • a321068e8d Add compile_commands.json file to .gitignore. Ondrej Kozina 2025-02-04 16:13:02 +01:00
  • e257def910 Remove redundant check for dm-integrity mapping table params section. Milan Broz 2025-01-27 21:39:47 +01:00
  • c9008528f9 tests: Remove function xx() bashism. Milan Broz 2025-01-27 20:43:33 +01:00
  • 3d535dcf31 tests: Add trap for segfault and sigabrt Milan Broz 2025-01-25 15:19:33 +01:00
  • a45fb0a90d Do not include dlfcn.h if external token support is disabled. Milan Broz 2025-01-15 14:21:16 +01:00
  • 06c0f03c9f Add a note regarding use of #if for config.h processing. Milan Broz 2025-01-27 10:40:09 +01:00
  • c6a7849090 Use #if for password quality libs defines. Milan Broz 2025-01-16 13:08:45 +01:00
  • 29741d91e6 Use #if in bitops.h. Milan Broz 2025-01-16 13:01:56 +01:00
  • 1e441bf75c Use #if for rest of defines. Milan Broz 2025-01-16 12:59:20 +01:00
  • d9404821a6 Use #if for HAVE_BLKID_* defines. Milan Broz 2025-01-16 12:49:46 +01:00
  • e5405f2fd8 Use #if for HAVE*_H defines. Milan Broz 2025-01-16 12:47:25 +01:00
  • 37d52876b9 Use #if for other ENABLE* options. Milan Broz 2025-01-16 12:36:51 +01:00
  • ff81791308 Use #if for ENABLE_AF_ALG. Milan Broz 2025-01-16 12:28:54 +01:00
  • c21c746eff Use #if for USE_UDEV. Milan Broz 2025-01-16 12:26:08 +01:00
  • bb304f45bd Use #if for KERNEL_KEYRING. Milan Broz 2025-01-16 12:22:17 +01:00
  • f64f6fb9e8 opal: Fix error table offset Milan Broz 2025-01-16 15:19:40 +01:00
  • 5c795885c5 opal: update copyright Milan Broz 2025-01-16 15:19:03 +01:00