[pkg-cryptsetup-devel] Bug#915214: cryptsetup-initramfs: Scripts from /usr/share/initramfs-tools/hooks/ don't add files to initramfs when /tmp/ and /var/tmp/ are mounted with noexec

Sat Dec 1 19:05:08 GMT 2018

Package: cryptsetup-initramfs
Version: 2:2.0.5-2
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Maintainer,

The /usr/share/initramfs-tools/hooks/cryptkeyctl file has the following lines:

- ------------------------------------
# Check whether cryptroot hook has installed decrypt_keyctl script
if [ ! -x "$DESTDIR/lib/cryptsetup/scripts/decrypt_keyctl" ]; then
    exit 0
fi
- ------------------------------------

My system has the /tmp/ and /var/tmp/ mounted with the "noexec" flag. In such
case, it looks like the check returns false and the /bin/keyctl binary isn't
added to the initramfs. Everything backs to normal when the tmp dirs are
remounted with the "exec" flag.

Also, the rest of files in /usr/share/initramfs-tools/hooks/crypt* have similar
check.