[pkg-cryptsetup-devel] Several minor questions (hopefully) ;)

Jonas Meurer jonas at freesources.org
Wed Dec 17 21:28:16 UTC 2008


Hey Christoph,

I'm quite busy, and I don't have the time to comment on every thought
you have about the debian cryptsetup package.

either try to implement the requested changes on your own and commit
patches to the bug tracking sytem, or at least write clear and short
wishlist bugreports where you describe _one_ request in _one_ bugreport.
and please always explain why you think that the requested change is
important.

sorry,
 jonas

On 16/12/2008 Christoph Anton Mitterer wrote:
> Ah I forgot:
> 
> On Mon, 2008-12-15 at 22:19 +0100, Jonas Meurer wrote:
> > No, functions like log_sucess_msg, panic, etc. are lsb functions meant
> > to be used in initscripts, and provided by /lib/lsb/init-functions.
> > You're free to use /lib/lsb/init-functions for your custom scripts,
> > though.
> Ok,.. I'm a little bit unsure about these,.. but there will be time
> later to ask you
> 
> 
> What's more important (ok at least for me is to resolve these issues):
> 
> 1) How are we going to handle timeout/tries. As mentioned before I'd
> suggest timeout is handled above the keyscripts,.. tries are handled
> form the keyscripts.
> Perhaps we put tries as 2nd parameter to the keyscripts
> 
> 2) Do we differ between keyscript or no keyscript? I think we
> shouldn't... The case with no keyscript (just plain passphrase) should
> simply use a default keyscript that uses askpass (perhaps not directly,
> because I would say it's not askpass's job to handle tries)
> 
> 3) About the same question goes for passdev. I'd say passdev is also
> just a helper like askpass.
> It should be generally allowed to use the device:path syntax (perhaps it
> would even be wise to separate these in /etc/crypttab,... not sure about
> this)... and all decrypt-scripts should have to support this (expect
> those decrypt scripts which doesn't use any key file at all,.. e.g. the
> askpass-wrapper-script.
> 
> If we'd do all that,.. it would be definitely good to have passdev
> working on already mounted devices...
> 
> 
> 
> What do you think of this?
> 
> 
> Thanks,
> Chris :-)





More information about the pkg-cryptsetup-devel mailing list