fscrypt.git/cmd/fscrypt, branch v0.2.3Go tool for managing Linux filesystem encryption
https://git.hodgden.net/cgit.cgi/fscrypt.git/atom?h=v0.2.32018-02-12T07:56:49Zvet: eliminate unnecessary shadowing2018-02-12T07:56:49ZJoseph Richeyjoerichey94@gmail.com2018-02-12T07:56:49Zurn:sha1:69630f37fcebe894b15872148bd8b2496806b60c
Running "go vet -shadow ./..." finds all places where a variable might
be incorrectly or unnecessarily shadowed. This fixes some of them.
cmd/fscrypt: don't show build time if not set2018-02-12T07:38:19ZJoseph Richeyjoerichey94@gmail.com2018-02-12T07:38:19Zurn:sha1:1f508cc30f3c1caadea5c648158880eacfe9b113lint: Remove all build tags2018-02-12T04:13:01ZJoseph Richeyjoerichey94@gmail.com2018-02-12T04:13:01Zurn:sha1:924b8d09db66868af7a6cf174d5346ace13dfa8a
Our current build tags set off the linter. We will later add in more
comprehensive build tags that will be properly formatted.
security: Sync filesystem before dropping caches2017-10-02T23:49:16ZJoe Richey joerichey@google.comjoerichey@google.com2017-10-02T23:49:16Zurn:sha1:c6568945adb69a3b7779c0f9e0e1f427d31209absecurity: Add check option to UserKeyringID2017-09-29T09:52:56ZJoseph Richeyjoerichey94@gmail.com2017-09-29T09:52:56Zurn:sha1:4d9372795e7b53d105f69790c1d9deadbff85458Fixes logging string for policies2017-09-07T01:16:03ZJoseph Richeyjoerichey@google.com2017-09-07T01:16:03Zurn:sha1:a949b13dac670014c37c7181e368b9c0c7a7f0f5
We should always log the descriptor not the entire policy structure.cmd/fscrypt: Add explanations for keyring failures2017-09-01T07:56:44ZJoseph Richeyjoerichey94@gmail.com2017-09-01T07:56:44Zurn:sha1:0dfbbf62fae3d4051dd5f0686835ac393f8a0247
Now the user is persented with help when they try to access a keyring
that isn't theirs or try to use fscrypt without a user keyring linked
into the session keyring.
cmd/fscrypt: Check that keyrings are setup2017-09-01T07:55:22ZJoseph Richeyjoerichey94@gmail.com2017-09-01T07:55:22Zurn:sha1:079ee257d27e28b166965f1fa0136f694598b6c7
Chaning the --user flag to (optionally) check for a proper keyring setup
allows us to fail early in cases where we need a working keyring.
Fixed linter issues2017-08-31T18:29:30ZJoe Richeyjoerichey@google.com2017-08-31T18:29:30Zurn:sha1:5586bc35fbb33f20c38f52285c19c015b804ea94cmd/fscrypt: Add --user flag for running as root2017-08-31T01:16:16ZJoe Richeyjoerichey@google.com2017-08-31T01:16:16Zurn:sha1:11b31826334bc3faa4d4c7ee05a3b2996a88c969
The --user flag can now be used to have the targe user (the one whose
keyring and password will be used in fscrypt) be different than the
calling user. Very usefull for things like
sudo fscrypt purge /media/joerichey/usb --user=joerichey
which will now have privileges to drop caches, but will properly clear
the keys from the user's keyring.