Author: Tyler Hicks
Revision Date: 2025-08-07 15:39:12 UTC

Remove unreachable code when parsing mount opt name value pairs

Revision 886 introduced a change to the mount option parsing code for
name-value pairs. A break was added to a loop once the first '=' is seen.
Before the break was added, it was possible that a '=' would be seen, then
memory allocated for the name portion of the string, then another '=' could be
seen and the previous name string be freed and then reallocated. However,
there's no longer a chance of needing to reallocate the name string so the
free() is not needed.

Discovered by Coverity (CID 1375979)

Author: Jason Xing
Revision Date: 2025-08-07 01:10:42 UTC

src/utils/ecryptfs-stat.c, src/libecryptfs/ecryptfs-stat.c, src/include/ecryptfs.h: Add ecryptfs-stat support for encrypted filenames (LP: #342398)

Author: Tyler Hicks
Revision Date: 2025-08-07 15:21:43 UTC

Remove unreachable code when parsing mount opt name value pairs

Revision 886 introduced a change to the mount option parsing code for
name-value pairs. A break was added to a loop once the first '=' is seen.
Before the break was added, it was possible that a '=' would be seen, then
memory allocated for the name portion of the string, then another '=' could be
seen and the previous name string be freed and then reallocated. However,
there's no longer a chance of needed to reallocate the name string so the
free() is not needed.

Discovered by Coverity (CID 1375979)

Author: Jason Xing
Revision Date: 2025-08-07 03:42:12 UTC

src/utils/ecryptfs-recover-private: Prevent ecryptfs-recover-private command is terminated because of printing warnings. So just get rid of line "exit 1" in the warn() function.

Author: Jason Xing
Revision Date: 2025-08-07 15:08:29 UTC

src/utils/ecryptfs-mount-private, doc/manpage/ecryptfs-mount-private.1: ecryptfs-mount-private -h prints short usage message (LP: #1449253)

Author: Jason Xing
Revision Date: 2025-08-07 03:29:02 UTC

Reproduce case:
1) User doesn't install openssl.
2) Run ecryptfs-manager and make selection 3.
It goes in the infinite loop...which means whatever selection you enter next cannot end this command or alter your option.

Explanation for the patch:
Adding several lines to take such a case into consideration, through testing whether "num_transitions" is set to zero or not we could prevent the infinite loop. If it is set to zero, it will return -EINVAL because "num_transitions" means how many options this command could show to users and zero means that user has no option to choose. (LP: #1695767)

Author: Jason Xing
Revision Date: 2025-08-07 06:35:19 UTC

src/libecryptfs/cmd_ln_parser.c: fix bug1419861

Author: Alberto Pianon
Revision Date: 2025-08-07 20:10:26 UTC

[ Alberto Pianon ]
src/utils/ecryptfs-setup-swap: Fix to make the script work with swapfiles
and to use the right script to start encrypted swap (LP: #1670336)

Author: Tyler Hicks
Revision Date: 2025-08-07 21:32:05 UTC

debian/ecryptfs-utils.postinst: Fix any unencrypted GPT swap partitions
that have mistakenly remained marked as auto mount. This should only
modify the swap partitions on systems that ecryptfs-setup-swap has been
used on. (LP: #1447282, LP: #1597154)

Author: Richard Laager
Revision Date: 2025-08-07 17:54:44 UTC

Fix improper "already mounted" errors with ZFS

The obvious approach for using ZFS and ecryptfs together involves
creating a dataset like this:
zfs create -o mountpoint=/home/.ecryptfs/USER rpool/home/USER

As a result, /proc/mounts looks like this:
rpool/home/USER /home/.ecryptfs/USER zfs rw,xattr 0 0

ecryptfs-setup-private checked for existing mount points using a grep
which was effectively left-anchored. Unfortunately, this can match the
device column. A space at the beginning of the pattern corrects this.

I applied the same fix to the CRYPTDIR for consistency and correctness,
though I do not believe it was a practical problem in the same way.

Author: Wiebe Cazemier
Revision Date: 2025-08-07 11:50:20 UTC

LP: #1539553

Error handling reading /dev/urandom fixed.

Author: Dustin Kirkland 
Revision Date: 2025-08-07 04:44:20 UTC

fix config

Author: Tyler Hicks
Revision Date: 2025-08-07 18:41:18 UTC

Add test for validating reported namelen value

Author: Zameer Manji
Revision Date: 2025-08-07 17:10:21 UTC

Adding -o flags option to pass arbitrary flags to ecryptfs through the test harness.

Author: Nobuto Murata
Revision Date: 2025-08-07 15:42:19 UTC

src/utils/ecryptfs-verify: check existence and permission of
wrapped-passphrase (LP: #1156672)

Author: Tyler Hicks
Revision Date: 2025-08-07 08:05:43 UTC

bzr merge lp:ecryptfs && autoreconf -i -v -f && intltoolize -f

Author: Dustin Kirkland 
Revision Date: 2025-08-07 18:10:16 UTC

* src/libecryptfs/module_mgr.c:
  - Use correct blowfish block size when displaying supported ciphers to
    the user

Author: Serge Hallyn
Revision Date: 2025-08-07 21:53:00 UTC

define emount

emount is a program to ease mounting and umounting of
various ecryptfs directories. For instance, I like to
have ~/Ubuntu\ One/gtd mounted on ~/gtd. To do this,
I would create .ecryptfs/gtd.conf, containing an fstab-like
entry:

  /home/serge/Ubuntu\ One/gtd /home/serge/gtd ecryptfs none 0 0

and create .ecryptfs/gtd.sig containing the signature. I
can ecryptfs-add-passphrase to preload my keychain, and then
just do

  emount gtd

to mount, and eumount gtd to unmount it.

Author: Dustin Kirkland
Revision Date: 2025-08-07 16:43:28 UTC

src/desktop/ecryptfs-record-passphrase: improve text

Author: Evan
Revision Date: 2025-08-07 15:01:21 UTC

 * ecryptfs-setup-swap:
   - Add a -no-reload option, so that it may be used in Ubuntu's installer.
   - Filter out RAM devices.
   - Cleaner check for swap block devices.

Author: Michael Rooney
Revision Date: 2025-08-07 13:32:10 UTC

merge from pythonapi branch

Author: Dustin Kirkland 
Revision Date: 2025-08-07 13:03:42 UTC

removed bz2 tarballs