]> git.ipfire.org Git - thirdparty/systemd.git/commit
homework: upload home password into kernel keyring if needed
authorLennart Poettering <lennart@poettering.net>
Tue, 2 Nov 2021 17:24:02 +0000 (18:24 +0100)
committerLennart Poettering <lennart@poettering.net>
Tue, 23 Nov 2021 07:07:21 +0000 (08:07 +0100)
commitd26cdde3d45ed8cd418afd7fa71697359b528c2c
tree0411a476d6be560bf96f32082e0a74c090c9074f
parent26191000383d79dd27c95748f668c4e27a37c799
homework: upload home password into kernel keyring if needed

If we do automatic disk space rebalancing, we must be able to unlock the
encrypted volume for that in the background, thus we need to decryption
key around in userspace. Let's do this via the kernel keyring. This
allows us to do this in a relatively secure way, so that it sticks
around between homework invocations, but still is destroyed
automatically when homed goes down.
src/home/homework-luks.c
src/home/homework-luks.h
src/home/homework-password-cache.c
src/home/homework-password-cache.h
src/home/homework.c
src/home/homework.h