Changelog for
cryptconfig-debuginfo-0.3-162.1.x86_64.rpm :
Sat Mar 2 13:00:00 2013 seife+obsAATTb1-systems.com
- fix build with automake-1.13.1
Fri Sep 30 14:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to make the spec file more reliable
Sun Jan 31 13:00:00 2010 jengelhAATTmedozas.de
- package baselibs.conf
Thu Jun 25 14:00:00 2009 sbrabecAATTsuse.cz
- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
Wed Feb 18 13:00:00 2009 mcAATTsuse.de
- write new \"fskeyhash\" and \"cipher\" attributes for \"volume\" in
pam_mount.conf.xml
Sat Dec 6 13:00:00 2008 mauroAATTsuse.de
- Updated translations.
Fri Nov 21 13:00:00 2008 criveraAATTsuse.de
- Make sure we found a map device before calling
get_mount_point (). This fixes bnc#448200.
Thu May 22 14:00:00 2008 cthielAATTsuse.de
- fix baselibs.conf
Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support
Wed Mar 5 13:00:00 2008 criveraAATTsuse.de
- Add a fix for bnc 367255.
Tue Mar 4 13:00:00 2008 criveraAATTsuse.de
- Add public data support. We use a very simple approach. We create a
public directory, /home/.$USER. Any public data is moved from the
encrypted home directory to the public directory. We then place symlinks
in the encrypted home directory and the unencrypted home directory that
point to the public data. The public data is available whether the
encrypted home directory is mounted or not.
This is adds two new commands pd-add and pd-remove. They each take a
list of relative or absolute paths rooted in the encrypted home directory.
Mon Jan 21 13:00:00 2008 ajAATTsuse.de
- Fix open call.
- Cleanup rpmlint warnings.
Mon Nov 12 13:00:00 2007 criveraAATTsuse.de
- Update cryptconfig to use new pam_mount xml config format.
- Use pam-config to modify PAM service files.
Fri Nov 2 13:00:00 2007 criveraAATTsuse.de
- Don\'t fail if some pam service files don\'t exist. This fixes
326794.
- Use loop ioctls instead of the losetup binary.
- Add memory locking to protect passpharses and key data.
- Allow for sizes like \"1G\" and \"200M\" to be given on the command
line.
Mon Jun 11 14:00:00 2007 ajAATTsuse.de
- Change Requires as well.
Fri Jun 1 14:00:00 2007 lnusselAATTsuse.de
- change BuildRequires util-linux-crypto -> cryptsetup
Fri Mar 30 14:00:00 2007 criveraAATTsuse.de
- Fix the copy_user_data() function to make sure dot directories
are getting copied. This fixes 259113.
Mon Mar 12 13:00:00 2007 criveraAATTsuse.de
- Implement pam_sm_open_session() and pam_sm_close_session() for
pam_cryptpass. This lets us hook into the session stack, before pam_mount,
to verify that the authtok being used can decrypt the image key. If it
can\'t then we can prompt for the key password and sync the two. This
provides a much nicer experience for users of non-local auth mechanisms.
This fixes 253683.
- Make root the owner of the unencrypted home directory. This is to avoid
confusion if the user logs in from a service that doesn\'t have pam_mount
in the stack. This fixes 245698.
- Add a flag, --remove-data, that will remove the data in the user\'s
unencrypted home directory after it\'s been copied to the encrypted image.
- Move the list of passwd services to cryptconfig.conf and add gnome-passwd
to the default list.
- Add pam_cryptpass.so to the pam session stack before pam_mount to ensure
that the key file is in sync with the user\'s password. This fixes 253683.
Wed Feb 21 13:00:00 2007 criveraAATTsuse.de
- Remove \'su\' from the list of pam config files to edit.
This fixes Bug 245702.
- Add a check against a key file size threshold to avoid interger overflow
attacks. This helps fix 243881.
- Replace chown and g_stat with fchown and fstat to avoid potential
symlink issues. This helps fix 243881.
- Use \"--\" to prevent user\'s from adding additional command-line options
to apps that we exec. This helps fix 243881.
- Use flock() to avoid races if multiple instances cryptconfig are running.
- Set our umask to 077. This helps fix 243881.
Wed Feb 14 13:00:00 2007 criveraAATTsuse.de
- Use 64-bit version of lseek() when creating and enlarging
images. This fixes 245632.
Mon Feb 12 13:00:00 2007 criveraAATTsuse.de
- Search for the full path when looking for the
loop device an image is using.
- Make get_passphrase() stop reading input when it encounters
a new line. This allows cryptconfig to be a little more scriptable
and allows the new unit tests to work.
- Correctly check the return value when adding a key file to an image.
- Only call luks_close() if we\'ve actually setup a map device.
- Don\'t allow encrypted home directories for the root user.
- Add a mount flag to the open command to allow images to be unlocked
and mounted.
- A few more minor fixes.
Tue Jan 23 13:00:00 2007 criveraAATTsuse.de
- Escape the \'\\\' characters in user names when writing to
pam_mount.conf. This allows encrypted directories to work
with Active Directory. This fixes bug 237929.
- Set our umask to 022.
- Merge a patch from dgollub to fix a file creation bug.
- Add O_TRUNC in crappy_rename() when copying across devices.
- Move the pam services list to cryptconf.conf instead of
depending on an internal list. This will allow people to
enable encrypted home dirs with other pam services.
- Use 256 bytes of random data when generating a key instead of 64.
This is why we depend on pam_mount-0.18-32.
Tue Jan 16 13:00:00 2007 criveraAATTsuse.de
- Fix a small automake build issue.
Fri Jan 12 13:00:00 2007 mawAATTsuse.de
- Feature update (more fate #253)
- Remove cryptconfig-pam_moddir.patch which is now upstream.
Tue Jan 9 13:00:00 2007 roAATTsuse.de
- fix lib64 issue: teach configure about PAM_MODDIR
- work around automake problem
Mon Jan 8 13:00:00 2007 mawAATTsuse.de
- Initial import into autobuild (fate #253).