Red Hat Bugzilla – Bug 838736
Anaconda/Kickstart LUKS Algorithm
Last modified: 2013-02-21 05:00:41 EST
** Original comment by firstname.lastname@example.org **
Account name: Defence Signals Directorate
Customer segment: 1
TAM/SRM customer: no
VHT score: 4
Strategic Customer: yes
Ability to choose LUKS encryption type in Kickstart.
Customer is the Australian Department of Defence and requires
aes-cbc-essiv:sa256 strength encryption on their storage devices.
At this point in time Anaconda is hard coded to use only aes-xts-plain64, based
on the outcome of BZ#600295
An option available in the kickstart configuration to set the LUKS encryption
Customer sets and appropriate flag/option in kickstart configuration. After
installation running the command below returns the algorithm selected
cryptsetup status luks-<id>
Sooner rather than later.
Follow-up patch (tested and) posted for review.
Verified on RHEL6.4-20121212.1
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.