Gregory Boga changed bug 1207499
What Removed Added
CC   gregory_boga@comcast.net

Comment # 3 on bug 1207499 from
(In reply to Ludwig Nussel from comment #1)
> where do those file in /etc/cryptsetup-keys.d/ come from? Did you create
> them manually or via yast?

Hello

if we are talking about the "installer", which I believe is yast, than yast
creates "/etc/cryptsetup-keys.d/" when the user creates an encrypted
filesystem, block device, partition, etc. I am currently running a freshly
installed tumbleweed snapshot (20230310-0) and can confirm that in the system
logs, I also have this warning.

However, when I go to adjust permissions, the directory is not on my system. I
have combed through the cryptsetup and LUKS1 documentation, and it appears that
"/etc/cryptsetup-keys.d/name.key" should have permissions of 0600, but since
this directory does not exist on my system, I am not sure how LUKS1/dm-crypt
have been setup. Maybe Tumbleweed hardcodes this structure into initramfs, key
loaded into memory?


You are receiving this mail because: