[pkg-cryptsetup-devel] Bug#996505: cryptsetup: set CRYPTTAB_OPTION_tries for keyscripts when not explicitly set

[Guilhem Moulin]

On Thu, 14 Oct 2021 at 23:43:32 +0200, Christoph Anton Mitterer wrote:
> I've noted that when there is no explicit tries=n in crypttab, that
> CRYPTTAB_OPTION_tries isn't set either for the keyscripts.

There is a 1:1 mapping between CRYPTTAB_OPTION_* and known options in
crypttab's 4th column, and I think we should keep that invariant.

I guess the default tries=3 is extremely unlikely to change because it's
arguably part of the API.  3rd party scripts might have hardcoded it and
changing it might break things.  I suggest you hardcode it as well.  An
alternative would be to add CRYPTTAB_TRIES_LEFT, but I'm not sure it's
worth the trouble.

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20211015/2ec4cd2a/attachment.sig>