[pkg-cryptsetup-devel] Bug#502772: cryptsetup: gnome autologin user should depend on boot passsword

Jonas Meurer jonas at freesources.org
Wed Nov 5 21:17:01 UTC 2008


On 19/10/2008 Daniel Müller wrote:
> If a linux PC is protected by luks hard disk encryption, you have to type
> two passwords: the luks boot password and the user password for the
> gnome/kde session. This is sometimes annoying.
> 
> A single user could active gnome/kde auto login and type only the boot password. 
> 
> If the same computer is used by more than one user, this is not possible.
> 
> Could luks pass the key slot number or a user name associated with the key
> slot number to gdm, so that the auto login user can depend on the boot
> password used?

Hey Daniel,

If at all, your request needs to be implemented in gdm. It's not only
out of cryptsetups scope to submit/forward a passphrase, it even would
be a grave security hole if it was supported.

I cannot imagine a secure implementation for your requested
functionality at all. maybe you can do something with libpam-mount.

sorry, the wishlist request is not valid for cryptsetup, thus I'm
closing the bugreport.

greetings,
 jonas





More information about the pkg-cryptsetup-devel mailing list