Re: [PATCH v5 0/7] eCryptfs: added support for the encrypted key type

From: lkml
Date: Fri Dec 14 2012 - 07:10:20 EST


Hi there,


Either this is completely braindead, or I'm missing something very obvious.
Why mess up encrypted keys with various "format" fixes.
I hope this doesn't start a trend.

The right (and disturbingly simpler) approach to fixing the auth_token vs.
raw key material issue would be to put the fix in eCryptfs.

In fact, all the relevant bits for filling the token from the key_desc/sig should be moved
from security/keys/encrypted/ecryptfs_format.c to fs/ecryptfs/ecryptfs_kernel.h,
and all the format cruft in encrypted-keys reverted.
Then pretty much any "default" encrypted key could be used for ecryptfsâ

What am I missing?


--@;

---
posted at http://www.serverphorums.com
http://www.serverphorums.com/read.php?12,341340,618745#msg-618745
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/