/[base]
ViewVC logotype

Revision 297691


Jump to revision: Previous Next
Author: allanjude
Date: Fri Apr 8 01:25:25 2016 UTC (8 years, 2 months ago)
Changed paths: 5
Log Message:
Create the GELIBOOT GEOM_ELI flag

This flag indicates that the user wishes to use the GELIBOOT feature to boot from a fully encrypted root file system.
Currently, GELIBOOT does not support key files, and in the future when it does, they will be loaded differently.
Due to the design of GELI, and the desire for secrecy, the GELI metadata does not know if key files are used or not, it just adds the key material (if any) to the HMAC before the optional passphrase, so there is no way to tell if a GELI partition requires key files or not.

Since the GELIBOOT code in boot2 and the loader does not support keys, they will now only attempt to attach if this flag is set. This will stop GELIBOOT from prompting for passwords to GELIs that it cannot decrypt, disrupting the boot process

PR:		208251
Reviewed by:	ed, oshogbo, wblock
Sponsored by:	ScaleEngine Inc.
Differential Revision:	https://reviews.freebsd.org/D5867


Changed paths

Path Details
Directoryhead/sbin/geom/class/eli/geli.8 modified , text changed
Directoryhead/sbin/geom/class/eli/geom_eli.c modified , text changed
Directoryhead/sys/geom/eli/g_eli.c modified , text changed
Directoryhead/sys/geom/eli/g_eli.h modified , text changed
Directoryhead/sys/geom/eli/g_eli_ctl.c modified , text changed

  ViewVC Help
Powered by ViewVC 1.1.27