[Pkg-cryptsetup-devel] Bug#430158: Bug#430158: closed by Jonas Meurer <jonas at freesources.org> (closing because of inactivity)

[Jonas Meurer]

On 15/02/2008 Helmut Grohne wrote:
> My problem was: a booting system asks only three times for a password
> and then boots without the encrypted block device.

yes, that's the default. do you suggest to raise this default of three
tries? I object against this suggestion, especially for security
reasons.

> Your proposed solution was to set tries=0 in /etc/crypttab.

as far as i know, that does not work. if you need to allow infinitive
tries, just set tries to a very big number.

> This does not increase the number of password questions at the boot
> stage, so it does not solve the problem. (I just verified that using a
> qemu test system.) Therefore I am reopening the bug. Anything unclear?

why don't you just raise the retries yourself in /etc/crypttab. As
mentioned above, infinitive retries are not supported, but you could set
tries=9999999, and i doubt that anybody will try to input the password
more than 9999999 times.

greetings,
 jonas