Ondrej Kozina 2c1a6e3f94 Make LUKS2 auto-recovery aware of device signatures. ...

auto-recovery triggers any time when only single correct LUKS2
header instance was found. That may be dangerous.

We should suppress auto-recovery in case blkid decided the
device is no longer LUKS device. For example if secondary (intact)
LUKS2 header was left behind and blkid declares the device is LVM2
member.

Moreover if at least one header instance is corrupted and blkid
declares device non-empty and non-LUKS in the same time, header load
operation will be aborted with error.

2018-07-11 22:19:35 +02:00

5.9 KiB

Raw Blame History

View Raw