[dm-crypt] crypttab "tmp" option and /tmp 1777 permissions

Heiko Rosemann heiko.rosemann at web.de
Sun Feb 9 11:46:36 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/09/2014 06:41 AM, Andrey Borzenkov wrote:
> Interesting thread 
> https://forums.opensuse.org/showthread.php/495266-After-update-root-works-but-not-regular-user
> which boils down to following:
> 
> user is using "tmp" option for /tmp crypto container in
> /etc/crypttab (in this case it seems it was created by installer
> without user even realizing it). This recreates filesystem every
> time, this resetting permissions of fs root to default. It in turn
> breaks KDM which needs /tmp to be writable.
> 
> I wonder what is the proper place to fix it. Reading crypttab
> manual, it says [...]

Cryptsetup/dm-crypt is not responsible for reading /etc/crypttab,
creating the filesystem and/or adjusting the permissions. This is left
to the distro maintainers (or maybe that know-it-all systemd - my
Slackware box has neither an /etc/crypttab nor systemd).

Even more so if the mapping is configured by the installer.

Best Regards,

Heiko

- -- 
eMails verschlüsseln mit PGP - privacy is your right!
Mein PGP-Key zur Verifizierung: http://pgp.mit.edu

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlL3XIgACgkQ/Vb5NagElAWruQCfc8kylSzBxHTIYd2fClLdbFPt
w/MAn0fiCAjY9MIn8w7kOB1I2dCKVvdu
=Tq9o
-----END PGP SIGNATURE-----



More information about the dm-crypt mailing list