[dm-crypt] Verify LUKS password

Yves-Alexis Perez corsac at debian.org
Tue Nov 29 18:40:18 CET 2011


On mar., 2011-11-29 at 18:31 +0100, Arno Wagner wrote:
> If you actually want to remove the LUKS mapping (i.e. "close" the
> LUKS container) when the screen safer engages and remap the LUKS
> container when the screensaver is unlocked, then this is complicated.
> It mau also not be what you want, given that unmapping the LUKS
> container with open files is eiter not possible or can result in
> arbitrary data corruption (I have not tried it). So you would
> need to do something like this on screenlocker-engage:
> 
> 1. Determine all open files in the LUKS container
> 2. Terminate all applications that have these files open
> 3. Unmount the LUKS container and verify it did unmount.
>    If unmount fails, go to 1. (An application could have opened
>    a file in between...) Maybe you can also do a ro remount first.
> 4. Unmap the LUKS container.
> 
> Now, this would need to be somehow script-driven from the 
> screensaver. Whether automated application clsoe is a good idea 
> depends very much on the situation and is generally _not_ a good 
> idea.
> 

What about luksSuspend operation?

Regards,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://www.saout.de/pipermail/dm-crypt/attachments/20111129/4670318b/attachment.asc>


More information about the dm-crypt mailing list