Changelog:
- Upgraded various dependencies, including golang.org/x/crypto to resolve the usual
CVEs in it (but as usual, not actually affecting fscrypt's use of it).
- When selecting password hashing parameters, fscrypt now takes cgroup limitations
into consideration.
- fscrypt encrypt no longer follows trailing symlinks when writing the recovery
instructions.
- fscrypt unlock no longer enters an infinite loop when an incorrect key file is
specified using --key=FILE, --quiet isn't specified, and standard input is a terminal.
- fscrypt unlock no longer enters an infinite loop when an incorrect password is specified,
--quiet isn't specified, and standard input isn't a terminal.
- The error message when multiple protectors are available now mentions --unlock-with in
addition to --protector.
- Documented the udev dependency for /dev/disk/by-uuid/ links.
Signed-off-by: John Audia <therealgraysky@proton.me>
Latest upstream source. shortlog:
Eric Biggers (13):
README.md: fix a typo
Fix non-constant format string passed to errors.Wrapf()
ci.yml: upgrade ubuntu-20.04 to ubuntu-latest
filesystem/mountpoint: fall back to using mount source field
Bump up required Go version to 1.23
Upgrade golang.org/x/sys
Upgrade golang.org/x/term
Upgrade golang.org/x/crypto
Upgrade google.golang.org/protobuf
Upgrade honnef.co/go/tools
Upgrade golang.org/x/tools
Upgrade github.com/urfave/cli
v0.3.6
NymanRobin (1):
Compare mount by value instead of reference
Petteri Räty (1):
Document stdin behaviour for getting raw key
dependabot[bot] (1):
build(deps): bump golang.org/x/crypto in the go_modules group
dkg (1):
README.md: link to RFE about systemd-homed fscrypt version support (#412)
Signed-off-by: John Audia <therealgraysky@proton.me>
Fscrypt is a high-level tool for the management of Linux native
filesystem encryption. fscrypt manages metadata, key generation, key
wrapping, PAM integration, and provides a uniform interface for creating
and modifying encrypted directories.
Upstream url: https://github.com/google/fscrypt/blob/master/README.md
Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712
Signed-off-by: John Audia <therealgraysky@proton.me>
John Audia