fscrypt.git/actions, branch 0.2.2

security: Change user keyring lookup algorithm

2017-09-01T07:53:07+00:00

Now instead of spawning a seperate thread we alternate between changing
the euid and ruid to both find the keyring and link it to the process
keyring. Note that we also ensure that the user keyring is linked into
the root keyring whenever possible.

actions: context now hold a target user.User

2017-08-31T01:00:04+00:00

This user is used with policies to interface with the keryings and with
protectors to indicate which user's login passphrase should be used to
protectors of type pam_passphrase.

Various small nits a helper functions for PAM

2017-08-22T18:51:31+00:00

cmd/fscrypt: purge command now clears cache

2017-08-18T05:49:44+00:00

crypto: Switch from session to user keyring

2017-08-15T20:16:08+00:00

actions: calculate password hash difficulty correctly

2017-08-07T17:05:53+00:00

'fscrypt setup' is supposed to calibrate the Argon2 password hashing
difficulty to 1s by default, but actually it was setting it to only 1s /
num_cpus because the hashing is done with all CPUs and it is timed using
the CLOCK_PROCESS_CPUTIME_ID clock, which measures the time spent by all
threads in the process.  Fix this by dividing the elapsed time by
HashingCosts.Parallelism, which is used as the number of threads.

tests: Unit tests and Integration tests work

2017-07-19T04:08:02+00:00

Now the testing functions will skip the integration tests if a testing
filesystem is not specified.

actions: Fixed flaky hashing test

2017-07-18T06:29:27+00:00

Small fixes so "make lint" doesn't complain.

2017-07-18T06:16:00+00:00

actions: Add tests for policy unlocking

2017-07-17T19:32:03+00:00