Export to GitHub

pam-encfs - issue #3

missing nocanonicalize check breaks pam_encfs in combination... again


Posted on Feb 12, 2011 by Happy Lion

I'm experiencing the exact same problem as described here http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593336. However I can't use root to login during an strace (seems to be a security issue) and logging in as user gives "Operation not permitted" error. Is there any other way I can diagnose the issue?

I'm using arch linux with pam_encfs 0.1.4.4 and util-linux-ng 2.18.

Comment #1

Posted on Feb 13, 2011 by Swift Giraffe

Hm, looks to be upstream issues.

Try applying attached file and checking your logs for information. (This patch is ancient, and might not apply 100% cleanly, should be ok though).

Attachments

Comment #2

Posted on Feb 13, 2011 by Happy Lion

Thanks for the reply. The only errors that came up were these.

Attachments

Comment #3

Posted on Feb 14, 2011 by Swift Giraffe

thats the exact parameters it'll use for the mount

encfs -v -o nonempty allow_root /home/nick/.crypt-raw /home/nick/crypt

try to see if you get any errors using that from commandline

Comment #4

Posted on Feb 16, 2011 by Happy Lion

If I run encfs -v -o nonempty allow_root /home/nick/.crypt-raw /home/nick/crypt I get an encfs error "When specifying daemon mode, you must use absolute paths (beginning with '/')". With encfs -v /home/nick/.crypt-raw /home/nick/crypt -o nonempty allow_root I get a fuse error "fuse: invalid argument `allow_root'". When I try encfs -v /home/nick/.crypt-raw /home/nick/crypt -o allow_root everything works. As a workaround I'll try just removing nonempty from my conf file.

Comment #5

Posted on Feb 17, 2011 by Happy Lion

Hmmm, that doesn't seem to have worked. Also the previous commands all work if you add a comma between the two fuse arguments.

Comment #6

Posted on Feb 17, 2011 by Swift Giraffe

http://code.google.com/p/pam-encfs/source/browse/trunk/pam_encfs.conf

It by default passes fuse arguments with , between them. You've removed the , from your configuration file.

Comment #7

Posted on Feb 23, 2011 by Happy Lion

Sorry didn't realise this was still when I posted a new issue.

Status: Invalid

Labels:
Type-Defect Priority-Medium