RHBA-2011:1503 - Bug Fix Advisory

Topic

Updated ecryptfs-utils packages that fix several bugs are now available for Red
Hat Enterprise Linux 5.

Description

eCryptfs is a stacked, cryptographic file system. It is transparent to the
underlying file system and provides per-file granularity.

eCryptfs is released as a Technology Preview for Red Hat Enterprise Linux 5.8.

These updated ecryptfs-utils packages provide fixes for the following bugs:

• Previously, the eCryptfs daemon, ecryptfsd, failed to start if the ecryptfs

kernel module had not already created the files necessary for user space
communication under the /dev/ and /dev/misc/ directories, and "No such file or
directory" messages were logged. This update avoids this race condition by
ensuring that the ecryptfsd daemon waits and then attempts to start again if it
discovers that the requisite files have not yet been created. (BZ#554740)

• Prior to this update ecryptfs did not correctly handle the salt option

together with the password file. As a result mounting of the encrypted file
system would fail and the error, "Bad address", would be displayed. With this
update ecryptfs correctly handles the salt option and mounting of the encrypted
file system using eCryptfs no longer fails. (BZ#553629)

All users of ecryptfs-utils are advised to upgrade to these updated packages,
which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 553629 - when using passwd_file together with salt option mount of ecryptfs fails
• BZ - 554740 - lazy /dev files creation on ecryptfs module load prevents ecryptfsd daemon to start

CVEs

(none)

References

(none)