Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Andraž Levstik (6130b9ba57fe8675e7d65907e24242b9b9983f17)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Andraž Levstik <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Andraž Levstik (6130b9ba57fe8675e7d65907e24242b9b9983f17)
  • Date: Tue, 17 Mar 2009 15:48:21 -0500

GIT changes to master grimoire by Andraž Levstik <ruskie AT codemages.net>:

ChangeLog | 6 +++
crypto/audio-entropyd/BUILD | 1
crypto/audio-entropyd/DETAILS | 13 ++++++
crypto/audio-entropyd/HISTORY | 3 +
crypto/audio-entropyd/PRE_BUILD | 4 ++
crypto/cryptmount/B8CEF5E7.gpg |binary
crypto/cryptmount/DEPENDS | 5 ++
crypto/cryptmount/DETAILS | 75
++++++++++++++++++++++++++++++++++++++++
crypto/cryptmount/HISTORY | 5 ++
9 files changed, 112 insertions(+)

New commits:
commit 6130b9ba57fe8675e7d65907e24242b9b9983f17
Author: Andraž Levstik <ruskie AT codemages.net>
Commit: Andraž Levstik <ruskie AT codemages.net>

crypto/audio-entropyd: new spell, entropy generating daemon that uses
audio as it's source

commit 950779f315471b31bf894968b66774271839dc70
Author: Andraž Levstik <ruskie AT codemages.net>
Commit: Andraž Levstik <ruskie AT codemages.net>

cryptmount: new spell, a utility which allows an ordinary user to mount
an encrypted filesystem

diff --git a/ChangeLog b/ChangeLog
index 8121a50..0d4b016 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2009-03-17 Andraž "ruskie" Levstik <ruskie AT mages.ath.cx>
+ * crypto/cryptmount: new spell, a utility which allows an ordinary
user to
+ mount an encrypted filesystem
+ * crypto/audio-entropyd: new spell, entropy generating daemon that
uses
+ audio as it's source
+
2009-03-16 Ladislav Hagara <hgr AT vabo.cz>
* crypto/yassl: new spell, Yet Another SSL

diff --git a/crypto/audio-entropyd/BUILD b/crypto/audio-entropyd/BUILD
new file mode 100755
index 0000000..8f58e6d
--- /dev/null
+++ b/crypto/audio-entropyd/BUILD
@@ -0,0 +1 @@
+make
diff --git a/crypto/audio-entropyd/DETAILS b/crypto/audio-entropyd/DETAILS
new file mode 100755
index 0000000..b93639b
--- /dev/null
+++ b/crypto/audio-entropyd/DETAILS
@@ -0,0 +1,13 @@
+ SPELL=audio-entropyd
+ VERSION=1.0.5
+ SOURCE="${SPELL}-${VERSION}.tgz"
+ SOURCE_URL[0]=http://www.vanheusden.com/aed/${SOURCE}
+
SOURCE_HASH=sha512:89e1271c13f032c7361e13e7770c4333dc3fef4715df9a8c2a348a63c66a817d76c6c47226257b79d026295f79b9f5653d904ee47365de370f4a8facb2d3cdee
+SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-${VERSION}"
+ WEB_SITE="http://www.vanheusden.com/aed/";
+ LICENSE[0]=GPL
+ ENTERED=20090317
+ SHORT="generates entropy-data for the /dev/random device"
+cat << EOF
+Audio-entropyd generates entropy-data for the /dev/random device.
+EOF
diff --git a/crypto/audio-entropyd/HISTORY b/crypto/audio-entropyd/HISTORY
new file mode 100644
index 0000000..0731e6e
--- /dev/null
+++ b/crypto/audio-entropyd/HISTORY
@@ -0,0 +1,3 @@
+2009-03-17 Andraž "ruskie" Levstik <ruskie AT mages.ath.cx>
+ * BUILD, DETAILS, PRE_BUILD: spell created
+
diff --git a/crypto/audio-entropyd/PRE_BUILD b/crypto/audio-entropyd/PRE_BUILD
new file mode 100755
index 0000000..0f6017d
--- /dev/null
+++ b/crypto/audio-entropyd/PRE_BUILD
@@ -0,0 +1,4 @@
+default_pre_build &&
+cd $SOURCE_DIRECTORY &&
+sed -i -e "s:/usr/local/sbin/:$INSTALL_ROOT/usr/sbin/:" Makefile &&
+sed -i '/.*init.d-audio-entropyd.*/d' Makefile
diff --git a/crypto/cryptmount/B8CEF5E7.gpg b/crypto/cryptmount/B8CEF5E7.gpg
new file mode 100644
index 0000000..4c3d7bc
Binary files /dev/null and b/crypto/cryptmount/B8CEF5E7.gpg differ
diff --git a/crypto/cryptmount/DEPENDS b/crypto/cryptmount/DEPENDS
new file mode 100755
index 0000000..1a50770
--- /dev/null
+++ b/crypto/cryptmount/DEPENDS
@@ -0,0 +1,5 @@
+depends lvm &&
+optional_depends libgcrypt \
+ "--with-libgcrypt" \
+ "--without-libgcrypt" \
+ "support libgcrypt-encryption of keys"
diff --git a/crypto/cryptmount/DETAILS b/crypto/cryptmount/DETAILS
new file mode 100755
index 0000000..bea3421
--- /dev/null
+++ b/crypto/cryptmount/DETAILS
@@ -0,0 +1,75 @@
+ SPELL=cryptmount
+ VERSION=4.0beta1
+ SOURCE="${SPELL}-${VERSION}.tar.gz"
+ SOURCE2=$SOURCE.sig
+ SOURCE_URL[0]=$SOURCEFORGE_URL/${SPELL}/${SOURCE}
+ SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
+ SOURCE_GPG=B8CEF5E7.gpg:$SOURCE2:UPSTREAM_KEY
+ SOURCE2_IGNORE=signature
+SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-${VERSION}"
+ WEB_SITE="http://cryptmount.sourceforge.net/";
+ LICENSE[0]=GPL
+ ENTERED=20090317
+ SHORT="a utility which allows an ordinary user to mount an
encrypted filesystem"
+cat << EOF
+There are currently two main approaches to using encrypted filesystems within
+the linux kernel:
+
+ * the cryptoloop device driver;
+ * the device-mapper system, using the dm-crypt target.
+
+The (older) cryptoloop system has grown in parallel with the loopback
+device-driver of 2.4 kernel series, but has now been superseded by
+the device-mapper capabilities of the 2.6 kernel series. The newer
+devmapper system offers a cleaner organization of encryption and
+device-access, and superior performance has been noted. Alternative
+user-space tools which allow individual files to be encrypted are
+also widely available, but allow some information about file sizes &
+organization to be exposed.
+
+With the older cryptoloop system, it was possible to describe all
+the details of an encrypted filesystem within /etc/fstab so that it
+could be configured completely by 'mount'. This meant that it was
+particularly easy to give any user permission to mount those encrypted
+filesystems simply by providing the 'user' option within /etc/fstab.
+
+With the newer device-mapper infrastructure, there are more stages
+involved in mounting an encrypted filing system, and neither does
+'mount' currently allow this nor does the syntax of /etc/fstab lend
+itself to describing all the necessary filesystem parameters. This
+is especially so if the filesystem is stored in an ordinary file,
+which would require separate configuration of a loopback device and
+a devmapper target before the filesystem could be accessed.
+
+cryptmount was written to make it as easy for ordinary users to
+access encrypted filesystems on-demand using the newer devmapper
+mechansism as it was to use the older, now deprecated, cryptoloop
+methods. This offers the following advantages:
+
+ * access to improved functionality in the kernel
+ * transparent support for filesystems stored on either raw
+ disk partitions or loopback files
+ * separate encryption of filesystem access keys, allowing
+ access passwords to be changed without re-encrypting
+ the entire filesystem
+ * storing multiple encrypted filesystems within a
+ single disk partition, using a designated subset of
+ blocks for each
+ * rarely used filesystems do not need to be
+ mounted at system startup
+ * un-mounting of each filesystem is locked
+ so that this can only be performed by the
+ user that mounted it, or the superuser
+ * encrypted filesystems compatible
+ with cryptsetup
+ * encrypted access-keys can
+ be chosen to be compatible with
+ openssl, or managed via libgcrypt,
+ or (for 2.0 release-series) built-in
+ SHA1/Blowfish ciphers
+ * support for encrypted swap
+ partitions (superuser only)
+ * support for setting up
+ encrypted filesystems or
+ crypto-swap at system boot-up
+EOF
diff --git a/crypto/cryptmount/HISTORY b/crypto/cryptmount/HISTORY
new file mode 100644
index 0000000..654c7f9
--- /dev/null
+++ b/crypto/cryptmount/HISTORY
@@ -0,0 +1,5 @@
+2009-03-17 Andraž "ruskie" Levstik <ruskie AT mages.ath.cx>
+ * DETAILS: converted to upstream signature checking
+ * B8CEF5E7.gpg: added gpg keyring
+ * DEPENDS, DETAILS: spell created
+



  • [SM-Commit] GIT changes to master grimoire by Andraž Levstik (6130b9ba57fe8675e7d65907e24242b9b9983f17), Andraž Levstik, 03/17/2009

Archive powered by MHonArc 2.6.24.

Top of Page