Encfs - Revision history

PhilippeTeuwen: Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

2010-11-24T20:32:39Z

Reverted edits by Etegohy (Talk) to last revision by PhilippeTeuwen

Can't load revision 6792

at 00:26, 24 November 2010

2010-11-24T00:26:34Z

Can't load revision 6632

PhilippeTeuwen at 16:13, 28 March 2008

2008-03-28T16:13:47Z

Show changes

PhilippeTeuwen at 16:12, 28 March 2008

2008-03-28T16:12:25Z

← Older revision		Revision as of 16:12, 28 March 2008
Line 30:		Line 30:

	My first attempt was a bash script:		My first attempt was a bash script:
			<source lang=bash>

	#!/bin/bash		#!/bin/bash

Line 79:		Line 79:
	# Unmount the home dir		# Unmount the home dir
	/usr/bin/fusermount -u $HOME		/usr/bin/fusermount -u $HOME
			</source>

	===PAM module===		===PAM module===

Line 141:		Line 141:
	* specific fuse options added only if generic fuse_default declared		* specific fuse options added only if generic fuse_default declared
	** patch:		** patch:
			<source lang=diff>
	--- pam_encfs.c.orig :50:29.000000000 +0200		--- pam_encfs.c.orig :50:29.000000000 +0200
	+++ pam_encfs.c:34:46.000000000 +0200		+++ pam_encfs.c:34:46.000000000 +0200
Line 158:		Line 159:
	arg_pos += buildCmd(arg,arg_pos,"-o");		arg_pos += buildCmd(arg,arg_pos,"-o");
	arg_pos += buildCmd(arg,arg_pos,fuse_options);		arg_pos += buildCmd(arg,arg_pos,fuse_options);
			</source>
	* if fuse_default or encfs_default empty, garbage produced on call to encfs or fuse		* if fuse_default or encfs_default empty, garbage produced on call to encfs or fuse
	** patch:		** patch:
			<source lang=diff>
	@@ -235,13 +235,12 @@		@@ -235,13 +235,12 @@
	continue;		continue;
Line 176:		Line 179:
	continue;		continue;
	}		}
			</source>
	* multiple options not supported for encfs_default		* multiple options not supported for encfs_default
	** patch:		** patch:
			<source lang=diff>
	@@ -253,6 +252,7 @@		@@ -253,6 +252,7 @@
	if (strcmp("-",fuse_options) == 0)		if (strcmp("-",fuse_options) == 0)
Line 186:		Line 191:

	if ((strcmp(user,username) == 0) \|\| (strcmp("-",username) == 0)) {		if ((strcmp(user,username) == 0) \|\| (strcmp("-",username) == 0)) {
			</source>
	* On some circumstances, fusermount fails while it shouldn't:		* On some circumstances, fusermount fails while it shouldn't:
	testphil@mercure:~$ mount		testphil@mercure:~$ mount
Line 204:		Line 210:
	** I should ask Sam Hartman <hartmans at ...> about this incoherence		** I should ask Sam Hartman <hartmans at ...> about this incoherence
	** patch:		** patch:
			<source lang=diff>
	@@ -81,7 +81,7 @@		@@ -81,7 +81,7 @@
	#define USERNAME_MAX 127		#define USERNAME_MAX 127
Line 213:		Line 220:
	static void _pam_log ( int err, const char *format, ... );		static void _pam_log ( int err, const char *format, ... );
	static char default_encfs_options[USERNAME_MAX];		static char default_encfs_options[USERNAME_MAX];
			</source>
	* It looks like the argument allow_root given to fuse is transformed into allow_other when displayed by mount		* It looks like the argument allow_root given to fuse is transformed into allow_other when displayed by mount

PhilippeTeuwen: /* Problems linked to the absence of locking support: */

2008-03-05T14:13:43Z

Problems linked to the absence of locking support:

← Older revision		Revision as of 14:13, 5 March 2008
Line 224:		Line 224:
	*** export XAUTHORITY=/tmp/.Xauthority-$USER		*** export XAUTHORITY=/tmp/.Xauthority-$USER
	*** export ICEAUTHORITY=/tmp/.ICEauthority-$USER		*** export ICEAUTHORITY=/tmp/.ICEauthority-$USER
			* with X: creates multiple ~/.serverauth.1234 with locking failures
			** cf bug [http://bugs.debian.org/469478 #469478], hack into startx script
	* with unison: error (error message is not adequate...)<br>Fatal error: Warning: the archives are locked.<br>If no other instance of unison is running, the locks should be removed.<br>Please delete lock files as appropriate and try again.		* with unison: error (error message is not adequate...)<br>Fatal error: Warning: the archives are locked.<br>If no other instance of unison is running, the locks should be removed.<br>Please delete lock files as appropriate and try again.
	** Create a soft link from ~/.unison to an dir out of the encfs		** Create a soft link from ~/.unison to an dir out of the encfs
Line 229:		Line 231:
	** For read-only IMAP, create a soft link from e.g. /home/user_noencfs/Maildir out of the encfs to ~/Maildir (so your mails will remain encrypted!) and tell to courier-imap that your homedir is the /home/user_noencfs		** For read-only IMAP, create a soft link from e.g. /home/user_noencfs/Maildir out of the encfs to ~/Maildir (so your mails will remain encrypted!) and tell to courier-imap that your homedir is the /home/user_noencfs
	** For read-write, this is not possible		** For read-write, this is not possible

	==Problems with hard links==		==Problems with hard links==
	When using paranoid mode, the default is External IV Chaining which means it's not possible to have hard links, i.e. having 2 different files (and filenames) pointing to the same data.		When using paranoid mode, the default is External IV Chaining which means it's not possible to have hard links, i.e. having 2 different files (and filenames) pointing to the same data.

PhilippeTeuwen: /* Problems linked to the absence of locking support: */

2008-02-11T22:05:15Z

Problems linked to the absence of locking support:

← Older revision		Revision as of 22:05, 11 February 2008
Line 229:		Line 229:
	** For read-only IMAP, create a soft link from e.g. /home/user_noencfs/Maildir out of the encfs to ~/Maildir (so your mails will remain encrypted!) and tell to courier-imap that your homedir is the /home/user_noencfs		** For read-only IMAP, create a soft link from e.g. /home/user_noencfs/Maildir out of the encfs to ~/Maildir (so your mails will remain encrypted!) and tell to courier-imap that your homedir is the /home/user_noencfs
	** For read-write, this is not possible		** For read-write, this is not possible
			==Problems with hard links==
			When using paranoid mode, the default is External IV Chaining which means it's not possible to have hard links, i.e. having 2 different files (and filenames) pointing to the same data.
			<br>This is a problem with e.g. gpgsm which is using link().

	==Problems with tiger==		==Problems with tiger==
	I get a very similar problem as [http://www.mail-archive.com/tiger-user@nongnu.org/msg00006.html this guy]: I always get the following msg		I get a very similar problem as [http://www.mail-archive.com/tiger-user@nongnu.org/msg00006.html this guy]: I always get the following msg

57.67.161.6: /* PAM module */

2007-07-17T07:28:25Z

PAM module

← Older revision		Revision as of 07:28, 17 July 2007
Line 96:		Line 96:
	session required pam_unix.so		session required pam_unix.so

	/etc/pam_encfs.conf:		/etc/security/pam_encfs.conf:
	drop_permissions		drop_permissions
	encfs_default		encfs_default

57.67.161.6: /* PAM module */

2007-07-17T07:27:30Z

PAM module

← Older revision		Revision as of 07:27, 17 July 2007
Line 126:		Line 126:
	sudo rmdir /home/encfs/tmp		sudo rmdir /home/encfs/tmp
	#logout		#logout

			Problem after fuse upgrade:
			* didn't work anymore.
			* I had to enable "user_allow_other" in /etc/fuse.conf

	Problems:		Problems:

PhilippeTeuwen: /* Personal script */

2007-06-30T14:24:42Z

Personal script

← Older revision		Revision as of 14:24, 30 June 2007
Line 48:		Line 48:
	#		#
	# License:		# License:
	# This script is under ~~GPL~~		# This script is under GPLv3 or later
	#		#
	# History:		# History:
Line 79:		Line 79:
	# Unmount the home dir		# Unmount the home dir
	/usr/bin/fusermount -u $HOME		/usr/bin/fusermount -u $HOME


	===PAM module===		===PAM module===

PhilippeTeuwen at 11:46, 21 May 2007

2007-05-21T11:46:02Z

← Older revision		Revision as of 11:46, 21 May 2007
Line 23:		Line 23:
	Another cool use of fuse is [http://shfs.sourceforge.net/ sshfs] (apt-get install sshfs)		Another cool use of fuse is [http://shfs.sourceforge.net/ sshfs] (apt-get install sshfs)
	<br>For other cool stuffs, check [http://fuse.sourceforge.net/wiki/index.php/FileSystems here], among others the amazing [http://unit.aist.go.jp/itri/knoppix/http-fuse/index-en.html HTTP-FUSE-KNOPPIX]		<br>For other cool stuffs, check [http://fuse.sourceforge.net/wiki/index.php/FileSystems here], among others the amazing [http://unit.aist.go.jp/itri/knoppix/http-fuse/index-en.html HTTP-FUSE-KNOPPIX]
			<br>Note on [http://www.ricardis.tudelft.nl/~vincent/fusesmb/ fusesmb]: contrary to use of smbfs where users are identified as USER/DOMAIN, here ~/.smb/fusesmb.conf must use username=DOMAIN/USER notation. On big Windows networks, I've problems discovering the neighborhood, in that case it's much easier to populate ~/.smb/fusesmb.cache by yourself with lines such as /WORKGROUP/COMPUTER/SHARE

	==Encfs homedir==		==Encfs homedir==