Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #990574 > unrolled thread

Bug#948520: buster lacks package ecryptfs-utils

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#948520: buster lacks package ecryptfs-utils Hadmut Danisch <hadmut@danisch.de> - 2020-01-09 20:40 +0100

#990574 — Bug#948520: buster lacks package ecryptfs-utils

[Multipart message — attachments visible in raw view] — view raw

Package: security.debian.org

Hi,

I just tried to read encrypted files (ecryptfs) from a fileserver
(written with ubuntu) on a debian buster machine, but I can't, because
the ecryptfs-utils are missing in buster.

As far as I found by googleing, the reason for dropping it was

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765854

i.e. private directories not unmounted when logging out.


If that is true, it was a rather shortsighted decision, because it
breakes particular functions, i.e. add passwords to the keyring or
mounting directories as a normal user.


Even if root can mount ecryptfs-filesystems directly, it's not available
to regular users, and giving it through tools like sudo open the door
too wide.

This is odd since there's no good substitute

  * encfs is unsecure
  * gocryptfs has some problems and runs in user space, see here
    https://defuse.ca/audits/gocryptfs.htm
  * cryfs is just based on a master thesis, and to the best of my
    knowledge, not audited.

On the other hand, ecryptfs keeps keys and encryption within kernel
space, thus providing better security than a user space daemon.



regards

Hadmut

[toc] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web