Re: A few more filesystem encryption questions

2016-04-03 Thread Theodore Ts'o
On Sun, Apr 03, 2016 at 12:58:33AM -0500, Eric Biggers wrote: > > I found that a process without access to the master encryption key can read a > file's full decrypted contents, provided that the file was opened recently by > a > process with access to the key. This is true even if the privilege

A few more filesystem encryption questions

2016-04-02 Thread Eric Biggers
Hello, A few more questions about the new filesystem encryption code: I found that a process without access to the master encryption key can read a file's full decrypted contents, provided that the file was opened recently by a process with access to the key. This is true even if the privileged