Skip to content

Various fixes to kernel keyring support

Ondrej Kozina requested to merge oniko/cryptsetup:volume-key-keyring-fixes into main

Some highlights:

  • when enabling vk linked in custom keyring, caller also has to specify custom key description
  • no setting permissions on newly linked keys in user session keyring or user keyring (it can be workarounded w/o libcryptsetup doing it by default)
  • change default key type from logon to user (when linking vk in custom keyring). The logon type does not make much sense if the vk needs to be verified from userspace later
  • in CLI users should not have to specify types. Let's apply default when it makes sense
  • drop unused code
  • various bug fixes

Merge request reports