[pkg-cryptsetup-devel] Bug#573392: (no subject)

Jan Engelhardt jengelh at medozas.de
Thu Mar 11 00:22:47 UTC 2010


Package: cryptsetup
Version: 1.0.7
Severity: important

I was trying to change pam_mount to use libcryptsetup instead of forking 
out to /sbin/cryptsetup, but then I noticed I cannot pass in the binary 
key material via the library api. (There is no keyfile on disk, it's 
only in memory.)

struct crypt_options:
- passphrase: zero terminated/no length parameter provided *shrug*
- passphrase_fd: pipe() to myself is prone to deadlock
- writing key material to a file: prone to missing cleanup and collisions

Any way to get it done for a non-interactive program?





More information about the pkg-cryptsetup-devel mailing list