Regression (2.0.x): `loopaesOpen --key-file=-` doesn't read the key from the standard input
loopaesOpen
's --key-file
option doesn't have special handling for -
, unlike what is mentioned in the manpage. (luksOpen
and plainOpen
are not affected, didn't check the other types.) As a consequence, cryptsetup loopaesOpen --key-file=-
calls openat(AT_FDCWD, "-", O_RDONLY)
while it should read the key from the standard input instead.
AFAICT the regression is caused by the removal of lib/utils_crypt.c:crypt_get_key()
. I see src/cryptsetup.c
's action_open_luks()
and action_open_plain()
are now both calling src/utils_password.c:tools_is_stdin()
, but action_open_loopaes()
doesn't.
Reported by Jon at https://bugs.debian.org/888162.