[Bug 591704] New: encrypted tmp not accessible for normal user
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c0 Summary: encrypted tmp not accessible for normal user Classification: openSUSE Product: openSUSE 11.3 Version: Milestone 4 Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: dutchkind@txoriaskea.org QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; nl; rv:1.9.2.2) Gecko/20100317 SUSE/3.6.2-1.2 Firefox/3.6.2 At installation I created an encrypted tmp from a partition. The same partition is used for the same purpose by my working opensuse 11.2. When I try to log in as normal user I get an error message telling me the tmp cannot be accessed with the question if it is maybe full. It has a size of 2Gb so that's not the problem. When I log in as root I have no problem, so then I changed the rights to rw for all users and I can log in as user after that. Upon reboot however, I have the same thing again, there is no write access to tmp by any user except root, which defeats the purpose of an encrypted tmp. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c1 --- Comment #1 from David Kerkhof <dutchkind@txoriaskea.org> 2010-06-04 16:31:42 UTC --- In 11.3 Milestone7 I have the same problem. When I however changed, logged in as root, with yast from acl to noacl, I could login just once, maybe because tmp was remounted. After reboot it was the same story again. If I compare things with 11.2, where I have the same partition mounted the same way, just defaults in yast, using encryption with empty password, things are configured differently: in fstab in 11.2: noauto option is added If I try this in 11.3, tmp is just not mounted. Looking in mtab I see also a difference, on 11.3 an option is used: _netdev This is missing in 11.2 The mountpoint, /tmp , is 744 in 11.3 and 777 + sticky in 11.2 (as should be) I cannot find other differences, but there must be others. A chmod 777 /tmp in /etc/init.d/boot.local fixes the problem, but I don't like this hack, prefer to know how to fix this in a clean way. I think nowadays you can hardly have a laptop without good protection so I think a working encrypted tmp is a must for the coming 11.3 release. David -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c yang xiaoyu <xyyang@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fehr@novell.com, | |jsuchome@novell.com AssignedTo|yast2-maintainers@suse.de |aschnell@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c2 Thomas Fehr <fehr@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|aschnell@novell.com |lnussel@novell.com --- Comment #2 from Thomas Fehr <fehr@novell.com> 2010-07-01 10:23:28 UTC --- Problem is in handling tmpcrypt option in /etc/init.d/boot.early, probably it worked in 11.2 since boot.early was not activated or not even present. Reassigning to maintainer of crypto boot scripts. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c3 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #3 from Ludwig Nussel <lnussel@novell.com> 2010-07-01 13:46:21 CEST --- workaround is to either run "chkconfig boot.crypto-early off" or to add the option 'noearly' in crypttab. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c4 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #4 from Ludwig Nussel <lnussel@novell.com> 2010-07-01 16:27:57 CEST --- fixed by making 'noearly' default for entries that also have the 'tmp' option. sr#42377 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=591704 http://bugzilla.novell.com/show_bug.cgi?id=591704#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (591704) was mentioned in https://build.opensuse.org/request/show/42377 Factory / cryptsetup -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com