Bug 796561 - RFE: add file name encryption support
Summary: RFE: add file name encryption support
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel
Version: 5.7
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Eric Sandeen
QA Contact: Red Hat Kernel QE team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-23 07:54 UTC by Frank.Buettner
Modified: 2013-04-29 16:48 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-04-29 16:48:41 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Frank.Buettner 2012-02-23 07:54:26 UTC
Description of problem:
When try to mount an directory with file name encryption, the option is still ignored.

Version-Release number of selected component (if applicable):
ecryptfs-utils-75-5.el5_7.2

How reproducible:
every time


Steps to Reproduce:
1. mkdir /tmp/testdir
2. mount -t ecryptfs -o ecryptfs_enable_filename_crypto=y,ecryptfs_passthrough=no,key=passphrase,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs /tmp/testdir /tmp/testdir
3. mount
(will show):
/tmp/testdir on /tmp/testdir type ecryptfs (rw,ecryptfs_sig=d395309aaad4de06,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs)
4. echo "This is a test" > /tmp/testdir/test
5. umount /tmp/testdir
6. ls /tmp/testdir
(will show):
test

  
Actual results:
The file content is encrypted, but not the file name self.

Expected results:
The file content and the file name to be encrypted.


Additional info:

Comment 1 Michal Hlavinka 2012-02-23 09:01:48 UTC
kernel in RHEL-5 does not support file name encryption:

# modprobe ecryptfs
# cat /sys/fs/ecryptfs/version
119

File name encryption support flag is 0x100 = 256

So there is no bug, ecryptfs kernel module present in rhel5 does not support this. Changing component to kernel.

Comment 2 Eric Sandeen 2013-04-29 16:48:41 UTC
eCryptfs is a tech preview offering in RHEL5.

We appreciate your testing and feedback; this bug is an RFE for expanded functionality in the tech preview offering.

We don't currently plan any significant enhancements to eCryptfs features in RHEL5.  If this is an important requirement for your RHEL deployment, please communicate that request through your RHEL support channels.

Closing WONTFIX for now.

Thanks,
-Eric


Note You need to log in before you can comment on or make changes to this bug.