Mailinglist Archive: opensuse-security (128 mails)

["Carlos E. R." <robin.listas@xxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Friday 2007-11-30 at 13:28 +0100, Ludwig Nussel wrote:

> > mycrypt_mm_f   /biggy/crypta_f.mm.x  none  
> > cipher=twofish-cbc-plain,size=256,hash=sha512,itercountk=100,noauto,loop
>
> The itercountk option is wrong in your case.

Ok, now it works via crypttab, too. Good :-)


> > If I define the entry in /etc/cryptotab, the "noauto" setting is ignored
> > and tries to mount during boot. Manually mounting later does work fine. I
> > can use the mount point as specifier.
>
> "noauto" never existed for cryptotab.

Pity. I thought you had added it.



> > If I define the entry in /etc/crypttab, the "noauto" setting works, but it
> > can not mount (errors out)
> >
> > Plus, it does not accept the mount point as specifier, requires
> > the file image.
>
> Yes indeed. The mountpoint is not in crypttab but in fstab,
> boot.crypto doesn't look into fstab at the point where it checks for
> the specified device. I guess I could implement that though.


That would be nice!  O:-)



I think I will use the /etc/cryptotab method meanwhile, because I remember 
better the mountpoints than the image files, and skip the mounting during 
boot pressing enter, if I read the notes correctly.

I could also use my own script, but then they would not be umounted on 
halt, and that is dangerous.

Ah, no! I could modify my own script to call boot.crypto converting 
mountpoints to image files for me :-)


- -- 
Cheers,
       Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFHUBJItTMYHG2NR9URAnMXAJ9mX5wbj93u2ihipBYhbQFTso3fLwCbB1QI
xiO+eSEeDOc4PxEyyu7yhak=
=7uoO
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-security+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security+help@xxxxxxxxxxxx