------------------------------------------------------------------- Wed Feb 25 13:47:43 CET 2009 - jsmeix@suse.de - Fixed initrd LUKS password annoyance in mkinitrd-boot.sh and mkinitrd-setup.sh when the same password is used for all partitions. In this case the password is now only asked once (bnc#465711). ------------------------------------------------------------------- Sun Dec 14 12:27:34 CET 2008 - bwalle@suse.de - Fix LUKS root partition residing on a soft raid (bnc#358341) ------------------------------------------------------------------- Mon Nov 3 14:03:33 CET 2008 - mkoenig@suse.de - boot.crypto-early: explicitly start before boot.localfs ------------------------------------------------------------------- Fri Sep 12 16:40:03 CEST 2008 - mkoenig@suse.de - branch off shlib to subpackage libcryptsetup0 - rename cryptsetup-devel to libcryptsetup-devel ------------------------------------------------------------------- Wed Sep 3 11:09:34 CEST 2008 - hare@suse.de - Call mkinitrd_setup during %post and %postun (bnc#413709) ------------------------------------------------------------------- Wed Aug 20 15:20:06 CEST 2008 - mkoenig@suse.de - enable SELinux support (fate#303662) ------------------------------------------------------------------- Wed Aug 13 11:21:14 CEST 2008 - mkoenig@suse.de - boot.crypto: * Fix init script tags ------------------------------------------------------------------- Fri Aug 8 11:42:10 CEST 2008 - mkoenig@suse.de - boot.crypto: * Provide some reasonable exit status (bnc#409502) ------------------------------------------------------------------- Wed Jul 23 15:44:31 CEST 2008 - hare@suse.de - Include mkinitrd scriptlets. ------------------------------------------------------------------- Wed Jul 23 13:05:20 CEST 2008 - mkoenig@suse.de - use /sbin/udevadm settle instead of /sbin/udevsettle (bnc#404875) ------------------------------------------------------------------- Tue May 6 12:36:49 CEST 2008 - mkoenig@suse.de - load loop module in boot.crypto-early as it might be needed. It is previously initially loaded by boot.localfs. ------------------------------------------------------------------- Wed Apr 9 15:59:09 CEST 2008 - mkoenig@suse.de - add support for boot.crypto-early (bnc#355824) needed to encrypt block devices for usage with LVM or MD adds a new option 'noearly' for crypttab, which will skip the device in boot.crypto-early. ------------------------------------------------------------------- Wed Feb 27 12:10:32 CET 2008 - mkoenig@suse.de - update to svn revision 46: * fix out of bound for key index in delKey (bnc#360041) * Add typo fixes to the cryptsetup.8 manpage * Add key-slot patch * Remove O_EXCL requirement for certain LUKS operations * mention luksKillSlot in the manpage ------------------------------------------------------------------- Mon Feb 4 16:22:42 CET 2008 - lnussel@suse.de - boot.crypto: * check for columns of terminal (bnc#337614) * enhance crypttab manpage (bnc#351061) * check for fs_passno (bnc#345339) ------------------------------------------------------------------- Wed Jan 9 12:07:14 CET 2008 - lnussel@suse.de - upgrade to svn revision 42 which includes previous patches - boot.crypto: * don't mount read-only as safety check (bnc#345338) * implement precheck scripts * allow restarting of single volumes (bnc#345605) * status query of individual devices (bnc#345605) * add vol_id check script * maintain boot.crypto stuff in revision control and use tarball snapshots of it ------------------------------------------------------------------- Thu Nov 29 13:47:24 CET 2007 - lnussel@suse.de - upgrade to svn revision 38 ------------------------------------------------------------------- Wed Nov 7 12:40:02 CET 2007 - mkoenig@suse.de - add %fillup_prereq and %insserv_prereq to PreReq ------------------------------------------------------------------- Tue Oct 16 10:38:35 CEST 2007 - lnussel@suse.de - upgrade to svn revision 31 * Rename luksDelKey into luksKillSlot * Add luksRemoveKey that queries a given key before removal * Fix segfault in luksOpen. * Add LUKS_device_ready check for most LUKS calls, so that cryptsetup dies before password querying in case a blockdev is unavailable * For LUKS key material access require exclusive access to the underlying device. This will prevent multiple mappings onto a single LUKS device. dm*crypt doesn't feature any syncing capabilities, hence there is no real application for this as it will likely lead to disk corruption. * Add signal handler to keyencryption to free the temporary mapping in case the user hits ctrl-c. ------------------------------------------------------------------- Mon Aug 27 16:25:54 CEST 2007 - lnussel@suse.de - remove /var/run/keymap from previous boot to make /etc/init.d/kbd work (#296409) ------------------------------------------------------------------- Mon Aug 27 10:42:32 CEST 2007 - lnussel@suse.de - run fsck with progressbar (#304750) ------------------------------------------------------------------- Thu Jun 21 16:06:53 CEST 2007 - mkoenig@suse.de - run udevsettle to avoid problems with busy temporary device mapper devices [#285478] ------------------------------------------------------------------- Mon Jun 11 09:23:24 CEST 2007 - lnussel@suse.de - rephrase error message (#279169) ------------------------------------------------------------------- Fri Jun 1 10:07:14 CEST 2007 - lnussel@suse.de - rename util-linux-crypto to cryptsetup - remove dmconvert - replace svn snapshot with official 1.0.5 release - don't enable boot.crypto by default ------------------------------------------------------------------- Tue May 29 15:58:44 CEST 2007 - lnussel@suse.de - fix segfault when trying to open a non existing device - fix gcc warnings - add Short-Description to boot.crypto - use %find_lang ------------------------------------------------------------------- Wed May 9 14:52:00 CEST 2007 - lnussel@suse.de - boot.crypto: implement 'status' - boot.crypto: accept argument to start/stop single devices ------------------------------------------------------------------- Wed May 9 10:40:28 CEST 2007 - lnussel@suse.de - hashalot: add timeout option ------------------------------------------------------------------- Wed May 9 09:40:42 CEST 2007 - lnussel@suse.de - fix build ------------------------------------------------------------------- Tue May 8 15:16:41 CEST 2007 - lnussel@suse.de - boot.crypto: switch off splash screen only when needed - boot.crypto: report status for individual volumes instead of using one global exit status - hashalot: exit unsucessfully on empty passphrase ------------------------------------------------------------------- Tue May 8 10:43:24 CEST 2007 - lnussel@suse.de - boot.crypto: sleep a bit longer before overwriting the prompt - boot.crypto: add support for pseed and itercountk options - boot.crypto: skip entries with unsupported/unknown options - hashalot: add support for itercountk ------------------------------------------------------------------- Fri May 4 16:38:11 CEST 2007 - lnussel@suse.de - upgrade cryptsetup to current svn revision 30 which includes previous patches. - fix background prompt process not getting killed on ctrl-d in boot.crypto ------------------------------------------------------------------- Fri Apr 27 15:46:05 CEST 2007 - lnussel@suse.de - upgrade cryptsetup to current svn revision 26. Does no longer hang when a file is specified instead of a device. - remove obsolete cryptsetup.sh script - boot.crypto: * drop support for cryptoloop, use cryptsetup also for cryptotab * refactor code and create reusable components for use in cryptotab and crypttab code path * run sulogin only during boot if fsck failed * support crypttab's 'tries' option - add crypttab manpage based on Debian one ------------------------------------------------------------------- Tue Apr 24 17:38:40 CEST 2007 - lnussel@suse.de - add boot.crypto (#257884) - add crypttab and cryptotab as %ghost to filelist ------------------------------------------------------------------- Tue Mar 27 10:22:48 CEST 2007 - mkoenig@suse.de - move devel .so link to %{libdir} - run ldconfig, since we have now a shared lib installed ------------------------------------------------------------------- Fri Mar 23 16:18:12 CET 2007 - dmueller@suse.de - cryptsetup can now link shared since libpopt is no longer under /usr ------------------------------------------------------------------- Fri Mar 9 12:06:53 CET 2007 - lnussel@suse.de - add patch to support old loop_fish2 key hash method ------------------------------------------------------------------- Thu Dec 7 18:33:01 CET 2006 - mkoenig@suse.de - update cryptsetup to version 1.0.4: * added terminal timeout rewrite * allow user selection of key slot * reading binary keys from stdin using the "-" as key file * fix 64 bit compiler warning issues. * fix getline problem for 64-bit archs. ------------------------------------------------------------------- Fri Oct 13 11:30:19 CEST 2006 - mkoenig@suse.de - fix build failure due to missing pthreads ------------------------------------------------------------------- Wed Sep 13 12:39:27 CEST 2006 - hvogel@suse.de - use the LUKS version of cryptsetup - split -devel subpackage for libcryptsetup - remove patches because they are in the new cryptsetup * cryptsetup-0.1-static.patch * cryptsetup-0.1-retval.patch * cryptsetup-0.1-dmi.exists.patch * cryptsetup-0.1-timeout.patch - use man page from the new cryptsetup ------------------------------------------------------------------- Tue May 16 11:03:08 CEST 2006 - hvogel@suse.de - Fix cryptsetup to work when the device does not exist yet [#175931] ------------------------------------------------------------------- Wed Jan 25 21:42:28 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Mon Dec 19 14:46:30 CET 2005 - mmj@suse.de - Remove symlinks to hashalot we don't want ------------------------------------------------------------------- Thu Oct 13 15:04:29 CEST 2005 - hvogel@suse.de - Fix uninitialized var in dmconvert. Add * dmconvert-0.2-uninitialized.patch - Fix return value in cryptsetup. Add * cryptsetup-0.1-retval.patch ------------------------------------------------------------------- Wed Jun 29 14:28:32 CEST 2005 - hvogel@suse.de - Link cryptsetup static so it can be in /sbin and you can get /usr over nfs or even crypted ------------------------------------------------------------------- Mon May 9 17:23:39 CEST 2005 - hvogel@suse.de - New package, Version 2.12q