diff options
author | Stefan Herbrechtsmeier <stefan@herbrechtsmeier.net> | 2013-04-09 21:11:01 +0000 |
---|---|---|
committer | Martin Jansa <Martin.Jansa@gmail.com> | 2013-04-15 16:16:52 +0200 |
commit | 8ded18cf95b4f6ae6a2563f7449a41fe95cd61e5 (patch) | |
tree | f29b8f443dbb52c91343eca9c657ccdc56061559 /meta-oe/recipes-support/cryptsetup | |
parent | 850bf451c5871ac3855dc793a67b6469b0240ac5 (diff) | |
download | meta-openembedded-8ded18cf95b4f6ae6a2563f7449a41fe95cd61e5.tar.gz |
cryptsetup: Update to latest version and use openssl as crypto backend
Cryptsetup with the command luksOpen failed with the error message:
device-mapper: status ioctl failed: Permission denied
The error comes from libgcrypt with drops root privileges if it is
linked with libcap support [1]. Update cryptsetup to latest version,
add PACKAGECONFIG for crypto backend selection (openssl / gcrypt)
and change the default crypto backend to openssl as libgcrypt states
the drop root privileges behaviour as a feature [2].
The license was updated to GPLv2 with OpenSSL exception.
Update the RRECOMMENDS to be conistent with the package names.
[1] http://code.google.com/p/cryptsetup/issues/detail?id=47
[2] https://bugs.g10code.com/gnupg/issue1181
Signed-off-by: Stefan Herbrechtsmeier <stefan@herbrechtsmeier.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Diffstat (limited to 'meta-oe/recipes-support/cryptsetup')
-rw-r--r-- | meta-oe/recipes-support/cryptsetup/cryptsetup_1.1.3.bb | 18 | ||||
-rw-r--r-- | meta-oe/recipes-support/cryptsetup/cryptsetup_1.6.1.bb | 31 |
2 files changed, 31 insertions, 18 deletions
diff --git a/meta-oe/recipes-support/cryptsetup/cryptsetup_1.1.3.bb b/meta-oe/recipes-support/cryptsetup/cryptsetup_1.1.3.bb deleted file mode 100644 index 254f563e0..000000000 --- a/meta-oe/recipes-support/cryptsetup/cryptsetup_1.1.3.bb +++ /dev/null | |||
@@ -1,18 +0,0 @@ | |||
1 | DESCRIPTION = "Setup virtual encryption devices under dm-crypt Linux" | ||
2 | HOMEPAGE = "http://code.google.com/p/cryptsetup/" | ||
3 | SECTION = "console" | ||
4 | LICENSE = "GPLv2" | ||
5 | LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f" | ||
6 | |||
7 | DEPENDS = "util-linux lvm2 libgcrypt popt" | ||
8 | RRECOMMENDS_${PN} = "kernel-module-aes \ | ||
9 | kernel-module-dm-crypt \ | ||
10 | kernel-module-md5 \ | ||
11 | kernel-module-cbc \ | ||
12 | kernel-module-sha256 \ | ||
13 | " | ||
14 | SRC_URI = "http://cryptsetup.googlecode.com/files/cryptsetup-${PV}.tar.bz2" | ||
15 | SRC_URI[md5sum] = "318a64470861ea5b92a52f2014f1e7c1" | ||
16 | SRC_URI[sha256sum] = "9c8e68a272f6d9cfb6cd65cc0743f4c44a2096c61f74e0602bf40208b5e69c0a" | ||
17 | |||
18 | inherit autotools gettext | ||
diff --git a/meta-oe/recipes-support/cryptsetup/cryptsetup_1.6.1.bb b/meta-oe/recipes-support/cryptsetup/cryptsetup_1.6.1.bb new file mode 100644 index 000000000..438d394e2 --- /dev/null +++ b/meta-oe/recipes-support/cryptsetup/cryptsetup_1.6.1.bb | |||
@@ -0,0 +1,31 @@ | |||
1 | SUMMARY = "Manage plain dm-crypt and LUKS encrypted volumes" | ||
2 | DESCRIPTION = "Cryptsetup is used to conveniently setup dm-crypt managed \ | ||
3 | device-mapper mappings. These include plain dm-crypt volumes and \ | ||
4 | LUKS volumes. The difference is that LUKS uses a metadata header \ | ||
5 | and can hence offer more features than plain dm-crypt. On the other \ | ||
6 | hand, the header is visible and vulnerable to damage." | ||
7 | HOMEPAGE = "http://code.google.com/p/cryptsetup/" | ||
8 | SECTION = "console" | ||
9 | LICENSE = "GPL-2.0-with-OpenSSL-exception" | ||
10 | LIC_FILES_CHKSUM = "file://COPYING;md5=32107dd283b1dfeb66c9b3e6be312326" | ||
11 | |||
12 | DEPENDS = "util-linux lvm2 popt" | ||
13 | |||
14 | SRC_URI = "http://cryptsetup.googlecode.com/files/cryptsetup-${PV}.tar.bz2" | ||
15 | SRC_URI[md5sum] = "f374d11e3b0e7ca0f805756fd02e34ff" | ||
16 | SRC_URI[sha256sum] = "baf36e663c03eb6440482d91c486d61ed47ce5c9268ad04c18ca09082755149c" | ||
17 | |||
18 | inherit autotools gettext | ||
19 | |||
20 | # Use openssl because libgcrypt drops root privileges | ||
21 | # if libgcrypt is linked with libcap support | ||
22 | PACKAGECONFIG ??= "openssl" | ||
23 | PACKAGECONFIG[openssl] = "--with-crypto_backend=openssl,,openssl" | ||
24 | PACKAGECONFIG[gcrypt] = "--with-crypto_backend=gcrypt,,libgcrypt" | ||
25 | |||
26 | RRECOMMENDS_${PN} = "kernel-module-aes-generic \ | ||
27 | kernel-module-dm-crypt \ | ||
28 | kernel-module-md5 \ | ||
29 | kernel-module-cbc \ | ||
30 | kernel-module-sha256-generic \ | ||
31 | " | ||