QA output created by 581 # Setting v1 policy as regular user (should succeed) # Getting v1 policy as regular user (should succeed) Encryption policy for SCRATCH_MNT/dir: Policy version: 0 Master key descriptor: 0000111122223333 Contents encryption mode: 1 (AES-256-XTS) Filenames encryption mode: 4 (AES-256-CTS) Flags: 0x02 # Adding v1 policy key as regular user (should fail with EACCES) Permission denied # Setting v2 policy as regular user without key already added (should fail with ENOKEY) SCRATCH_MNT/dir: failed to set encryption policy: Required key not available # Adding v2 policy key as regular user (should succeed) Added encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Setting v2 policy as regular user with key added (should succeed) # Getting v2 policy as regular user (should succeed) Encryption policy for SCRATCH_MNT/dir: Policy version: 2 Master key identifier: 69b2f6edeee720cce0577937eb8a6751 Contents encryption mode: 1 (AES-256-XTS) Filenames encryption mode: 4 (AES-256-CTS) Flags: 0x02 # Creating encrypted file as regular user (should succeed) # Removing v2 policy key as regular user (should succeed) Removed encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Testing user key quota Added encryption key Added encryption key Added encryption key Added encryption key Added encryption key Error adding encryption key: Disk quota exceeded # Adding key as root Added encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Getting key status as regular user Present (user_count=1) # Removing key only added by another user (should fail with ENOKEY) Error removing encryption key: Required key not available # Setting v2 encryption policy with key only added by another user (should fail with ENOKEY) SCRATCH_MNT/dir: failed to set encryption policy: Required key not available # Adding second user of key Added encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Getting key status as regular user Present (user_count=2, added_by_self) # Setting v2 encryption policy as regular user # Removing this user's claim to the key Removed user's claim to encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Getting key status as regular user Present (user_count=1) # Adding back second user of key Added encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 # Remove key for "all users", as regular user (should fail with EACCES) Permission denied Present (user_count=2, added_by_self) # Remove key for "all users", as root Removed encryption key with identifier 69b2f6edeee720cce0577937eb8a6751 Absent