Bug 796561

Summary: RFE: add file name encryption support
Product: Red Hat Enterprise Linux 5 Reporter: Frank.Buettner
Component: kernelAssignee: Eric Sandeen <esandeen>
Status: CLOSED WONTFIX QA Contact: Red Hat Kernel QE team <kernel-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 5.7   
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-04-29 16:48:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Frank.Buettner 2012-02-23 07:54:26 UTC 
Description of problem:
When try to mount an directory with file name encryption, the option is still ignored.

Version-Release number of selected component (if applicable):
ecryptfs-utils-75-5.el5_7.2

How reproducible:
every time


Steps to Reproduce:
1. mkdir /tmp/testdir
2. mount -t ecryptfs -o ecryptfs_enable_filename_crypto=y,ecryptfs_passthrough=no,key=passphrase,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs /tmp/testdir /tmp/testdir
3. mount
(will show):
/tmp/testdir on /tmp/testdir type ecryptfs (rw,ecryptfs_sig=d395309aaad4de06,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs)
4. echo "This is a test" > /tmp/testdir/test
5. umount /tmp/testdir
6. ls /tmp/testdir
(will show):
test

  
Actual results:
The file content is encrypted, but not the file name self.

Expected results:
The file content and the file name to be encrypted.


Additional info:
Comment 1 Michal Hlavinka 2012-02-23 09:01:48 UTC 
kernel in RHEL-5 does not support file name encryption:

# modprobe ecryptfs
# cat /sys/fs/ecryptfs/version
119

File name encryption support flag is 0x100 = 256

So there is no bug, ecryptfs kernel module present in rhel5 does not support this. Changing component to kernel.
Comment 2 Eric Sandeen 2013-04-29 16:48:41 UTC 
eCryptfs is a tech preview offering in RHEL5.

We appreciate your testing and feedback; this bug is an RFE for expanded functionality in the tech preview offering.

We don't currently plan any significant enhancements to eCryptfs features in RHEL5.  If this is an important requirement for your RHEL deployment, please communicate that request through your RHEL support channels.

Closing WONTFIX for now.

Thanks,
-Eric