linux

iv/linux

History

Michael Halcrow e4465fdaeb eCryptfs: make ecryptfs_prepare_write decrypt the page

When the page is not up to date, ecryptfs_prepare_write() should be
acting much like ecryptfs_readpage(). This includes the painfully
obvious step of actually decrypting the page contents read from the
lower encrypted file.

Note that this patch resolves a bug in eCryptfs in 2.6.24 that one can
produce with these steps:

# mount -t ecryptfs /secret /secret
# echo "abc" > /secret/file.txt
# umount /secret
# mount -t ecryptfs /secret /secret
# echo "def" >> /secret/file.txt
# cat /secret/file.txt

Without this patch, the resulting data returned from cat is likely to
be something other than "abc\ndef\n".

(Thanks to Benedikt Driessen for reporting this.)

Signed-off-by: Michael Halcrow <mhalcrow@us.ibm.com>
Cc: Benedikt Driessen <bdriessen@escrypt.com>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2008-03-04 16:35:16 -08:00

crypto.c

ecryptfs: check for existing key_tfm at mount time

2008-02-06 10:41:13 -08:00

debug.c

eCryptfs: update comment and debug statement

2007-10-16 09:43:11 -07:00

dentry.c

Embed a struct path into struct nameidata instead of nd->{dentry,mnt}

2008-02-14 21:13:33 -08:00

ecryptfs_kernel.h

ecryptfs: check for existing key_tfm at mount time