Accepting request 67725 from home:msmeissn:branches:security

OBS-URL: https://build.opensuse.org/request/show/67725
OBS-URL: https://build.opensuse.org/package/show/security/ecryptfs-utils?expand=0&rev=14

ecryptfs-utils.changes

@@ -1,3 +1,68 @@
+-------------------------------------------------------------------
+Mon Apr 18 17:06:50 CEST 2011 - meissner@suse.de
+
+- Updated to 87
+  * src/utils/ecryptfs-setup-private: update the Private.* selinux
+    contexts
+  * src/utils/ecryptfs-setup-private:
+    - add -p to mkdir, address noise for a non-error
+    - must insert keys during testing phase, since we remove keys on
+      unmount now, LP: #725862
+  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
+    interactive mode, LP: #667331
+- Updated to 86
+  * src/pam_ecryptfs/pam_ecryptfs.c:
+    - check if this file exists and ask the user for the wrapping passphrase
+      if it does
+    - eliminate both ecryptfs_pam_wrapping_independent_set() and
+      ecryptfs_pam_automount_set() and replace with a reusable
+      file_exists_dotecryptfs() function
+  * src/utils/mount.ecryptfs_private.c:
+    - support multiple, user configurable private directories by way of
+      a command line "alias" argument
+    - this "alias" references a configuration file by the name of:
+      $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
+      as well as $HOME/.ecryptfs/alias.sig, in the same format as
+      Private.sig
+    - if no argument specified, the utility operates in legacy mode,
+      defaulting to "Private"
+    - rename variables, s/dev/src/ and s/mnt/dest/
+    - add a read_config() function
+    - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
+    - this is half of the fix to LP: #615657
+  * doc/manpage/mount.ecryptfs_private.1: document these changes
+  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
+    - allow umount.ecryptfs_private to succeed when the key is no
+      longer in user keyring.
+- Updated to 85
+  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
+  * src/utils/mount.ecryptfs_private.c:
+    - fix bug LP: #313812, clear used keys on unmount
+    - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
+      umount.ecryptfs behave similarly
+    - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
+  * src/utils/ecryptfs-migrate-home:
+    - support user databases outside of /etc/passwd, LP: #627506
+- Updated to 84
+  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
+  * debian/rules, debian/control:
+    - disable the gpg key module, as it's not yet functional
+    - clean up unneeded build-deps
+    - also, not using opencryptoki either
+  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
+    email by Jon 'maddog' Hall
+  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
+    po/POTFILES.in, src/utils/ecryptfs-recover-private,
+    src/utils/Makefile.am: add a utility to simplify data recovery
+    of an encrypted private directory from a Live ISO, LP: #689969
+
+-------------------------------------------------------------------
+Sat Apr 10 15:39:27 UTC 2010 - aj@suse.de
+
+- Fix build with adding requires on mozilla-nss-devel and python-devel.
+- Fix package list.
+
+-------------------------------------------------------------------
 Thu Mar 18 13:33:43 CET 2010 - meissner@suse.de
 
 - Updated to 83

ecryptfs-utils.spec

@@ -24,12 +24,13 @@ License:        GPLv2+
 Group:          Productivity/Security
 AutoReqProv:    on
 Summary:        Userspace Utilities for ecryptfs
-Version:        83
-Release:        1
+Version:        87
+Release:        2
 Source0:        http://launchpad.net/ecryptfs/trunk/%version/+download/ecryptfs-utils_%version.orig.tar.gz
 Source1:        baselibs.conf
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  gtk2-devel intltool keyutils-devel keyutils-libs libgcrypt-devel openssl-devel pam-devel pkcs11-helper-devel trousers-devel
+BuildRequires:  gtk2-devel intltool keyutils-devel keyutils-libs libgcrypt-devel mozilla-nss-devel openssl-devel pam-devel pkcs11-helper-devel python-devel trousers-devel
+BuildRequires:  update-desktop-files
 
 %description
 A stacked cryptographic filesystem for Linux.
@@ -63,6 +64,11 @@ make check
 
 %install
 %makeinstall
+mkdir -p $RPM_BUILD_ROOT/%{_datadir}/applications/
+mv $RPM_BUILD_ROOT/%{_datadir}/ecryptfs-utils/*desktop $RPM_BUILD_ROOT/%{_datadir}/applications/
+%suse_update_desktop_file ecryptfs-mount-private
+%suse_update_desktop_file ecryptfs-setup-private
+%find_lang %{name}
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -71,7 +77,7 @@ rm -rf $RPM_BUILD_ROOT
 
 %postun -p /sbin/ldconfig
 
-%files
+%files -f %{name}.lang
 %defattr(-, root, root)
 %doc COPYING NEWS README THANKS doc/ecryptfs-faq.html doc/ecryptfs-pam-doc.txt
 /usr/include/ecryptfs.h
@@ -83,6 +89,10 @@ rm -rf $RPM_BUILD_ROOT
 %{_mandir}/man7/ecryptfs*
 %{_mandir}/man8/*ecryptfs*
 %{_libdir}/ecryptfs*
+%{_datadir}/ecryptfs-utils
 /%_lib/security/pam_ecryptfs.so
+%{python_sitelib}/ecryptfs-utils
+%{python_sitearch}/ecryptfs-utils
+%{_datadir}/applications/ecryptfs-*
 
 %changelog

ecryptfs-utils_83.orig.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ede721fa2dba9cb3dadf89e5a21c555be35fa031abd841073fcc6f92e3b29dee
-size 548235

ecryptfs-utils_87.orig.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:02952f122ae2a9c1a0fe6835575970fab4cefeb16b88e81ccaf00241c0161e7f
+size 542880