[Pkg-cryptsetup-devel] Bug#351022: endless loop after syntax error in crypttab

[Hadmut Danisch]

On Thu, Feb 16, 2006 at 09:30:49PM +0100, Jonas Meurer wrote:
> i've problems with reproducing this bug.
> 
> but unfortunately i found another bug with encrypted swap support.
> first, do you have a swap check in /lib/cryptsetup/prechecks/swap? the
> package doesn't provide one, so the 'precheck=swap' option should not do
> anything.

It's missing in the debian package (I've submitted another report
about this), but it exists in the upstream source. I had taken it
from the source distribution.



> second, for me the space instead of comma doesn't break cryptdisks. the
> check simply is not run, as a fifth argument in /etc/crypttab is ignored
> in any case.

My /etc/init.d/cryptdisks went into an endless loop. I can't reproduce
it at the moment on my machine at home. The problem occured on a
notebook, which I currently do not have here. I'll check this.



> third, and that is the real problem, the swap postcheck is rather
> useless. most people will use /dev/random as key for swap partitions.
> therefore the check for swap headers on the decrypted device will always
> fail.
> only if a constant key is used for swap (why should somebody do that),
> the check can succeed.


What about 2.6 soft suspending to the swap partition?






> but regarding your bugreport, i don't know how to reproduce it. can you
> paste your complete swap line in /etc/crypttab?

I couldn't reproduce it here at home, but I'll check when I have the
notebook for the next time, where the problem occured.


regards
Hadmut