Re: RFC: pefs - stacked cryptographic filesystem

2010-09-08 Thread Kevin Oberman
> Date: Tue, 7 Sep 2010 21:46:18 +0300 > From: Gleb Kurtsou > > On (07/09/2010 10:57), Kevin Oberman wrote: > > On Mon, 6 Sep 2010, Gleb Kurtsou wrote: > > > > > I would like to ask for feedback on a kernel level stacked cryptographic > > > filesystem. It has started as Summer Of Code'2009 proj

Re: pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-08 Thread Gleb Kurtsou
On (08/09/2010 11:25), Daniel O'Connor wrote: > > On 08/09/2010, at 3:22, Gleb Kurtsou wrote: > > Please note that your home directory has to be mounted, I mount it in > > /etc/rc.local, but don't add any keys. pam_pefs adds the key. Also note > > that it has to be exactly your home directory (/ho

Re: pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-07 Thread Daniel O'Connor
On 08/09/2010, at 3:22, Gleb Kurtsou wrote: > Please note that your home directory has to be mounted, I mount it in > /etc/rc.local, but don't add any keys. pam_pefs adds the key. Also note > that it has to be exactly your home directory (/home/gleb in my case), to > prevent possible attacks. And

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 7 September 2010 22:05, Gleb Kurtsou wrote: > On (07/09/2010 16:27), Ivan Voras wrote: >> On 09/06/10 20:38, Gleb Kurtsou wrote: >> > Hello, >> > >> > I would like to ask for feedback on a kernel level stacked cryptographic >> > filesystem. It has started as Summer Of Code'2009 project and matu

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 16:27), Ivan Voras wrote: > On 09/06/10 20:38, Gleb Kurtsou wrote: > > Hello, > > > > I would like to ask for feedback on a kernel level stacked cryptographic > > filesystem. It has started as Summer Of Code'2009 project and matured a > > lot since then. I've recently added support f

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 17:04), Ivan Voras wrote: > On 09/06/10 20:38, Gleb Kurtsou wrote: > > > Tested on top of ZFS, UFS and tmpfs on amd64 and i386; both 9-CURRENT > > and 8-STABLE supported. > > You probably didn't test it, but I've tried pefs on top of ext2fs (I use > ext2fs to share data between OS

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 10:57), Kevin Oberman wrote: > On Mon, 6 Sep 2010, Gleb Kurtsou wrote: > > > I would like to ask for feedback on a kernel level stacked cryptographic > > filesystem. It has started as Summer Of Code'2009 project and matured a lot > > since then. I've recently added support for spa

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
Thanks to Peter Holm and Thomas Vogt for finding several bugs: * Compilation with DIAGNOSTIC option * Vnode reference and lock leak in pefs_rename() I've uploaded new version to test: http://github.com/downloads/glk/pefs/pefs-2010-09-07.tar.gz Github repository is also updated. Also note, that i

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Kevin Oberman
On Mon, 6 Sep 2010, Gleb Kurtsou wrote: > I would like to ask for feedback on a kernel level stacked cryptographic > filesystem. It has started as Summer Of Code'2009 project and matured a lot > since then. I've recently added support for sparse files and switched to XTS > encryption mode. > >

pam_pefs setup (Re: RFC: pefs - stacked cryptographic filesystem)

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 16:32), Thomas Vogt wrote: [...] > > I've an issue with pam_pefs: > > ===> lib/libpam/modules/pam_pefs (install) > install -C -o root -g wheel -m 444 libpam_pefs.a /usr/lib > install -C -o root -g wheel -m 444 libpam_pefs_p.a /usr/lib > install -o root -g wheel -m 444 pam_pefs.

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Gleb Kurtsou
On (07/09/2010 14:28), Robert Watson wrote: > On Mon, 6 Sep 2010, Gleb Kurtsou wrote: > > > I would like to ask for feedback on a kernel level stacked cryptographic > > filesystem. It has started as Summer Of Code'2009 project and matured a lot > > since then. I've recently added support for spa

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 09/06/10 20:38, Gleb Kurtsou wrote: Tested on top of ZFS, UFS and tmpfs on amd64 and i386; both 9-CURRENT and 8-STABLE supported. You probably didn't test it, but I've tried pefs on top of ext2fs (I use ext2fs to share data between OSes) and it quickly panicked. _

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Ivan Voras
On 09/06/10 20:38, Gleb Kurtsou wrote: Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-07 Thread Robert Watson
On Mon, 6 Sep 2010, Gleb Kurtsou wrote: I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've been

Re: RFC: pefs - stacked cryptographic filesystem

2010-09-06 Thread Gleb Kurtsou
Sorry for replying to myself, I've realized I put wrong download link: http://github.com/downloads/glk/pefs/pefs-2010-09-06.tar.gz On (06/09/2010 21:38), Gleb Kurtsou wrote: > Hello, > > I would like to ask for feedback on a kernel level stacked cryptographic > filesystem. It has started as Summe

RFC: pefs - stacked cryptographic filesystem

2010-09-06 Thread Gleb Kurtsou
Hello, I would like to ask for feedback on a kernel level stacked cryptographic filesystem. It has started as Summer Of Code'2009 project and matured a lot since then. I've recently added support for sparse files and switched to XTS encryption mode. I've been using it to encrypt my home directory