]>
git.apps.os.sepia.ceph.com Git - fscrypt.git/log
Joseph Richey [Mon, 12 Feb 2018 04:13:01 +0000 (20:13 -0800)]
lint: Remove all build tags
Our current build tags set off the linter. We will later add in more
comprehensive build tags that will be properly formatted.
Joseph Richey [Fri, 9 Feb 2018 12:01:32 +0000 (04:01 -0800)]
Merge pull request #84 from google/argon2
Move to x/crypto/argon2
Joseph Richey [Fri, 9 Feb 2018 11:17:23 +0000 (03:17 -0800)]
dep: Run dep ensure
Joseph Richey [Fri, 9 Feb 2018 09:51:44 +0000 (01:51 -0800)]
docs/travis: Remove mention of Argon2
Now that Argon2 is simply and implementation detail of the `crypto`
package, and no a build dependancy, we don't need it in Travis or in the
documenation for building fscrypt.
Joseph Richey [Thu, 8 Feb 2018 10:37:42 +0000 (02:37 -0800)]
crypto: Move from libargon2 -> x/crypto/argon2
Use the golang library for the hashing function instead of the reference
C implementation. This removes the dependancy on libargon2. As we are no
longer doing our own error checking, we also eliminate those tests.
Joseph Richey [Thu, 8 Feb 2018 10:01:29 +0000 (02:01 -0800)]
Merge pull request #83 from google/dep
Start using Dep
Joseph Richey [Thu, 8 Feb 2018 09:44:09 +0000 (01:44 -0800)]
dep: Update Travis to use dep
Add dep instalation, remove govendor from go tools, and add a check for
dependancies.
Joseph Richey [Thu, 8 Feb 2018 09:08:10 +0000 (01:08 -0800)]
dep: Setup Gopkg.toml
This change transitions to dep, sets up Gopkg.toml, and purnes the
maximum allowable number of files.
Joseph Richey [Sat, 3 Feb 2018 00:03:30 +0000 (16:03 -0800)]
Change Golang formatter
Moves from goimports to [goreturns](https://github.com/sqs/goreturns).
This should not effect any code that already compiles as goreturns only
adds zero return values, then runs goimports.
This is mainly to help improve ergonomics when dealing with multiple
return types.
Joseph Richey [Fri, 2 Feb 2018 23:59:50 +0000 (15:59 -0800)]
Remove unnecessary gitignore rule
Joseph Richey [Fri, 12 Jan 2018 19:45:53 +0000 (11:45 -0800)]
Merge pull request #75 from ilius/PR-README-typo
Fix typo in README.md
Saeed Rasooli [Fri, 12 Jan 2018 09:09:55 +0000 (17:09 +0800)]
fix typo in README.md: $GOPATH/github.com -> $GOPATH/src/github.com
Joseph Richey [Thu, 11 Jan 2018 21:33:14 +0000 (13:33 -0800)]
Merge pull request #74 from google/maxMemory
Limit the amount of RAM that will be used
Joe Richey joerichey@google.com [Thu, 11 Jan 2018 04:37:25 +0000 (20:37 -0800)]
Format files correctly
Joe Richey joerichey@google.com [Thu, 11 Jan 2018 04:24:15 +0000 (20:24 -0800)]
Limit the amount of RAM that will be used
Fixes #73.
Adds maxMemoryBytes as 128MiB and cleans up the helper
functions/variables to make it more clear which values are a number of
bytes, and which values are a number of KiB.
Joseph Richey [Thu, 5 Oct 2017 06:04:48 +0000 (23:04 -0700)]
Merge pull request #70 from kant/patch-1
Typos
Darío Hereñú [Thu, 5 Oct 2017 04:31:29 +0000 (01:31 -0300)]
Typos
Joseph Richey [Tue, 3 Oct 2017 22:33:23 +0000 (15:33 -0700)]
Merge pull request #69 from google/makefile
Makefile cleanup
Joseph Richey [Tue, 3 Oct 2017 22:19:42 +0000 (15:19 -0700)]
Makefile: Updated scripts to run tests in travis
Joseph Richey [Tue, 3 Oct 2017 12:55:15 +0000 (05:55 -0700)]
Merge pull request #68 from dvrkps/patch-1
travis: update go version
Davor Kapsa [Tue, 3 Oct 2017 06:34:53 +0000 (08:34 +0200)]
travis: update go version
Joseph Richey [Mon, 2 Oct 2017 23:56:27 +0000 (16:56 -0700)]
Merge pull request #67 from google/sync
security: Sync filesystem before dropping caches
Joe Richey joerichey@google.com [Mon, 2 Oct 2017 23:49:16 +0000 (16:49 -0700)]
security: Sync filesystem before dropping caches
Joseph Richey [Fri, 29 Sep 2017 10:16:43 +0000 (03:16 -0700)]
Merge pull request #64 from google/new_values
Update all external dependencies to the latest version
Joseph Richey [Fri, 29 Sep 2017 10:13:57 +0000 (03:13 -0700)]
Merge pull request #65 from google/session_keyring
security: Add check option to UserKeyringID
Joseph Richey [Fri, 29 Sep 2017 10:13:20 +0000 (03:13 -0700)]
vendor: Just add windows to make govendor work
Joseph Richey [Fri, 29 Sep 2017 10:06:17 +0000 (03:06 -0700)]
Fix lint
Joseph Richey [Fri, 29 Sep 2017 09:52:56 +0000 (02:52 -0700)]
security: Add check option to UserKeyringID
Joseph Richey [Fri, 29 Sep 2017 09:43:14 +0000 (02:43 -0700)]
metadata: Add new encryption modes
Joseph Richey [Fri, 29 Sep 2017 09:39:01 +0000 (02:39 -0700)]
Makefile: Don't update dependancies w/ "make all"
Joseph Richey [Fri, 29 Sep 2017 09:08:56 +0000 (02:08 -0700)]
vendor: Update to latest versions
This changes the vendored sources of github.com/golang/protobuf,
golang.org/x/crypto/ssh, and golang.org/x/sys/unix to be the current
master versions.
Joseph Richey [Thu, 7 Sep 2017 01:16:03 +0000 (18:16 -0700)]
Fixes logging string for policies
We should always log the descriptor not the entire policy structure.
Joseph Richey [Fri, 1 Sep 2017 09:23:53 +0000 (02:23 -0700)]
Merge pull request #56 from google/panics
Fixed failures in PAM module
Joseph Richey [Fri, 1 Sep 2017 07:56:44 +0000 (00:56 -0700)]
cmd/fscrypt: Add explanations for keyring failures
Now the user is persented with help when they try to access a keyring
that isn't theirs or try to use fscrypt without a user keyring linked
into the session keyring.
Joseph Richey [Fri, 1 Sep 2017 07:55:22 +0000 (00:55 -0700)]
cmd/fscrypt: Check that keyrings are setup
Chaning the --user flag to (optionally) check for a proper keyring setup
allows us to fail early in cases where we need a working keyring.
Joseph Richey [Fri, 1 Sep 2017 07:53:07 +0000 (00:53 -0700)]
security: Change user keyring lookup algorithm
Now instead of spawning a seperate thread we alternate between changing
the euid and ruid to both find the keyring and link it to the process
keyring. Note that we also ensure that the user keyring is linked into
the root keyring whenever possible.
Joseph Richey [Fri, 1 Sep 2017 07:50:42 +0000 (00:50 -0700)]
security: No more permenant privilege dropping
This was creating an issue becasuse fully dropping privileges required
spawning a goroutine and using rutime.DropOSThread().
Joseph Richey [Fri, 1 Sep 2017 07:47:34 +0000 (00:47 -0700)]
pam_fscrypt: PAM module no longer crashes on panic
Now the offending panic will just be logged and the module will fail.
This is important as to not crash the login process.
Joseph Richey [Thu, 31 Aug 2017 21:51:55 +0000 (14:51 -0700)]
Merge pull request #52 from google/keyrings
Changes to the keyrings interface, corresponding UI changes, and misc changes
Joseph Richey [Thu, 31 Aug 2017 21:51:37 +0000 (14:51 -0700)]
Merge pull request #54 from google/uuid
Use `/dev/disk/by-uuid` to get UUID links to other filesystems
Joe Richey [Thu, 31 Aug 2017 21:05:29 +0000 (14:05 -0700)]
filesystem: libblkid -> search /dev/disk/by-uuid
Joe Richey [Thu, 31 Aug 2017 19:09:26 +0000 (12:09 -0700)]
security: Error if privilege reset goes wrong
Joe Richey [Thu, 31 Aug 2017 18:29:30 +0000 (11:29 -0700)]
Fixed linter issues
Joe Richey [Thu, 31 Aug 2017 01:16:16 +0000 (18:16 -0700)]
cmd/fscrypt: Add --user flag for running as root
The --user flag can now be used to have the targe user (the one whose
keyring and password will be used in fscrypt) be different than the
calling user. Very usefull for things like
sudo fscrypt purge /media/joerichey/usb --user=joerichey
which will now have privileges to drop caches, but will properly clear
the keys from the user's keyring.
Joe Richey [Thu, 31 Aug 2017 01:03:09 +0000 (18:03 -0700)]
pam_fscrypt: Added logging and use of new pam API
Joe Richey [Thu, 31 Aug 2017 01:00:04 +0000 (18:00 -0700)]
actions: context now hold a target user.User
This user is used with policies to interface with the keryings and with
protectors to indicate which user's login passphrase should be used to
protectors of type pam_passphrase.
Joe Richey [Thu, 31 Aug 2017 00:57:38 +0000 (17:57 -0700)]
crypto: Updated to include user parameter
Joe Richey [Thu, 31 Aug 2017 00:55:30 +0000 (17:55 -0700)]
pam: Handle holds data for calling and PAM users
The functions are now changed to (Start|Stop)AsPamUser to indicate that
they handle privilege modification and keyring setup.
Joe Richey [Thu, 31 Aug 2017 00:51:05 +0000 (17:51 -0700)]
security: Rewrite of keryings and permissions
The keyring lookup functions no longer read from /proc/keys. Now they
simply spawn a thread, drop privs, and check with GetKeyringID and
KEY_SPEC_USER_KEYRING. See userKeyringID() for more info.
The privileges functions have also been changed. Now the concept of
setting privileges is seperate form the concept of setting up the
keyrings.
Joseph Richey [Wed, 30 Aug 2017 11:49:39 +0000 (04:49 -0700)]
util: Added parsing and effective user functions
Joseph Richey [Wed, 30 Aug 2017 11:07:13 +0000 (04:07 -0700)]
gitignore: Update to include VSCode files
Joseph Richey [Wed, 30 Aug 2017 05:29:33 +0000 (22:29 -0700)]
Go formatter "gofmt" -> "goimports"
Joseph Richey [Wed, 30 Aug 2017 04:37:01 +0000 (21:37 -0700)]
pam_fscrypt: Handle empty arguments list
Joseph Richey [Wed, 30 Aug 2017 04:32:33 +0000 (21:32 -0700)]
cmd/fscrypt: Stop dropping/raising for sudo
Joseph Richey [Wed, 30 Aug 2017 02:06:26 +0000 (19:06 -0700)]
Merge pull request #49 from google/misc
Fix a wide variety of small issues and update documentation
Joseph Richey [Tue, 29 Aug 2017 23:53:16 +0000 (16:53 -0700)]
Merge pull request #48 from google/contrib
Update CONTRIBUTING.md to explain how issues will work
Joseph Richey [Tue, 29 Aug 2017 23:47:19 +0000 (16:47 -0700)]
Merge pull request #47 from google/build_tags
Makefile: Build version flag no longer needs repo
Joe Richey [Tue, 29 Aug 2017 18:57:34 +0000 (11:57 -0700)]
README: Clarified boot related encryption issues
Joe Richey [Tue, 29 Aug 2017 18:23:26 +0000 (11:23 -0700)]
CONTRIBUTING: typo
Joe Richey [Tue, 29 Aug 2017 18:17:10 +0000 (11:17 -0700)]
crypto: Handle when "ulimit -l" is too low
Joe Richey [Tue, 29 Aug 2017 17:25:53 +0000 (10:25 -0700)]
Fixed typos
Joe Richey [Tue, 29 Aug 2017 17:23:54 +0000 (10:23 -0700)]
Added +build linux,cgo flags
Joe Richey [Tue, 29 Aug 2017 16:46:12 +0000 (09:46 -0700)]
CONTRIBUTING: Make it clear how issues work
Joe Richey [Tue, 29 Aug 2017 16:05:02 +0000 (09:05 -0700)]
Makefile: Build version flag no longer needs repo
Joseph Richey [Mon, 28 Aug 2017 20:02:18 +0000 (13:02 -0700)]
Merge pull request #44 from mhalcrow/master
Fix typo (once -> one).
Michael Halcrow [Fri, 25 Aug 2017 21:45:09 +0000 (14:45 -0700)]
Fix typo (once -> one).
Joseph Richey [Thu, 24 Aug 2017 07:53:11 +0000 (00:53 -0700)]
Merge pull request #25 from google/fix
fscrypt PAM module
Joseph Richey [Thu, 24 Aug 2017 07:29:54 +0000 (00:29 -0700)]
Updated documentation for PAM module help
Joseph Richey [Thu, 24 Aug 2017 06:46:54 +0000 (23:46 -0700)]
security: fscrypt now possesses the user keyring
Joe Richey joerichey@google.com [Thu, 24 Aug 2017 01:51:23 +0000 (18:51 -0700)]
pam_fscrypt: Session accounting completed
Joe Richey joerichey@google.com [Wed, 23 Aug 2017 19:29:10 +0000 (12:29 -0700)]
Added some documentation and improved security API
Joe Richey joerichey@google.com [Tue, 22 Aug 2017 22:41:18 +0000 (15:41 -0700)]
pam_fscrypt: lock all PAM policies w/ flag
Joe Richey joerichey@google.com [Tue, 22 Aug 2017 21:15:58 +0000 (14:15 -0700)]
pam_fscrypt: Updated module to use new APIs
Joe Richey joerichey@google.com [Tue, 22 Aug 2017 19:52:41 +0000 (12:52 -0700)]
security: Moved cache dropping function
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 22:42:31 +0000 (15:42 -0700)]
Updated documentation and build system for PAM
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 22:41:23 +0000 (15:41 -0700)]
pam_fscrypt: The actual PAM module and config
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 22:40:35 +0000 (15:40 -0700)]
Various small nits a helper functions for PAM
Joseph Richey [Tue, 22 Aug 2017 18:46:39 +0000 (11:46 -0700)]
Merge pull request #39 from google/purge
Purge command now clears cache
Joe Richey joerichey@google.com [Tue, 22 Aug 2017 18:32:03 +0000 (11:32 -0700)]
security: Fixed typo and improved error handling
Joe Richey joerichey@google.com [Wed, 16 Aug 2017 01:11:29 +0000 (18:11 -0700)]
cmd/fscrypt: purge command now clears cache
Joseph Richey [Tue, 15 Aug 2017 20:46:32 +0000 (13:46 -0700)]
Merge pull request #37 from google/keyring
crypto: Switch from session to user keyring
Joseph Richey [Tue, 15 Aug 2017 20:46:04 +0000 (13:46 -0700)]
Merge pull request #36 from google/memory
util: Slice/Pointer conversion fits in MatInt32
Joe Richey joerichey@google.com [Tue, 15 Aug 2017 19:06:11 +0000 (12:06 -0700)]
crypto: Switch from session to user keyring
Joseph Richey [Mon, 14 Aug 2017 00:40:15 +0000 (17:40 -0700)]
util: Slice/Pointer conversion fits in MatInt32
Joseph Richey [Mon, 7 Aug 2017 18:21:13 +0000 (11:21 -0700)]
Merge pull request #33 from ebiggers/fix_hashing_calibration
actions: calculate password hash difficulty correctly
Joseph Richey [Mon, 7 Aug 2017 17:29:58 +0000 (10:29 -0700)]
Merge pull request #32 from ebiggers/ErrKeyFileLength_fix
cmd/fscrypt: fix help message for ErrKeyFileLength
Eric Biggers [Mon, 7 Aug 2017 17:05:53 +0000 (10:05 -0700)]
actions: calculate password hash difficulty correctly
'fscrypt setup' is supposed to calibrate the Argon2 password hashing
difficulty to 1s by default, but actually it was setting it to only 1s /
num_cpus because the hashing is done with all CPUs and it is timed using
the CLOCK_PROCESS_CPUTIME_ID clock, which measures the time spent by all
threads in the process. Fix this by dividing the elapsed time by
HashingCosts.Parallelism, which is used as the number of threads.
Eric Biggers [Mon, 7 Aug 2017 16:51:20 +0000 (09:51 -0700)]
cmd/fscrypt: fix help message for ErrKeyFileLength
The key file for the raw_key source is required to contain a wrapping
key (32 bytes), not a policy key (64 bytes).
Joseph Richey [Tue, 25 Jul 2017 09:54:25 +0000 (02:54 -0700)]
Merge pull request #30 from google/josephlr-patch-1
README reformatting
Joseph Richey [Tue, 25 Jul 2017 09:53:13 +0000 (02:53 -0700)]
README reformatting
The version badge was broken. This fixes it and inlines the version in the top line.
Joseph Richey [Sun, 23 Jul 2017 09:21:16 +0000 (02:21 -0700)]
Merge pull request #29 from google/docs
Fixed cloning instructions
Joseph Richey [Sun, 23 Jul 2017 09:10:36 +0000 (02:10 -0700)]
README: Fixed cloning documentation
Joseph Richey [Thu, 20 Jul 2017 01:17:29 +0000 (18:17 -0700)]
Merge pull request #27 from google/tests
coveralls: Adding Travis CI integration
Joe Richey joerichey@google.com [Thu, 20 Jul 2017 01:10:18 +0000 (18:10 -0700)]
Build system: no longer run make gen for make all
Joe Richey joerichey@google.com [Thu, 20 Jul 2017 00:54:12 +0000 (17:54 -0700)]
crypto: Add more tests for bad key lengths
Joe Richey joerichey@google.com [Thu, 20 Jul 2017 00:42:44 +0000 (17:42 -0700)]
README: add badges for license and code coverage
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 23:55:43 +0000 (16:55 -0700)]
coveralls: Adding Travis CI integration
Joseph Richey [Wed, 19 Jul 2017 04:51:15 +0000 (21:51 -0700)]
Merge pull request #23 from google/fix
travis CI: Test config file
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 04:18:22 +0000 (21:18 -0700)]
Makefile: typo
Joe Richey joerichey@google.com [Wed, 19 Jul 2017 04:09:55 +0000 (21:09 -0700)]
Update documentation about new build system