diff options
| author | Jakob Unterwurzacher | 2015-11-01 01:32:33 +0100 |
|---|---|---|
| committer | Jakob Unterwurzacher | 2015-11-01 01:38:27 +0100 |
| commit | 76311b60f2e208dbd93e1e7b6e9794770c14fede (patch) | |
| tree | fa71d48744fd1ad6de26aaadd03f2440e4d4103d /pathfs_frontend/fs.go | |
| parent | 73fa8efdb27172210b9751eb86689287db0b1170 (diff) | |
Add file header (on-disk-format change)
Format: [ "Version" uint16 big endian ] [ "Id" 16 random bytes ]
Quoting SECURITY.md:
* Every file has a header that contains a 16-byte random *file id*
* Each block uses the file id and its block number as GCM *authentication data*
* This means the position of the blocks is protected as well. The blocks
can not be reordered or copied between different files without
causing an decryption error.
Diffstat (limited to 'pathfs_frontend/fs.go')
| -rw-r--r-- | pathfs_frontend/fs.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/pathfs_frontend/fs.go b/pathfs_frontend/fs.go index ba46309..eebc87b 100644 --- a/pathfs_frontend/fs.go +++ b/pathfs_frontend/fs.go @@ -119,7 +119,8 @@ func (fs *FS) Mknod(name string, mode uint32, dev uint32, context *fuse.Context) } func (fs *FS) Truncate(path string, offset uint64, context *fuse.Context) (code fuse.Status) { - return fs.FileSystem.Truncate(fs.EncryptPath(path), offset, context) + cryptfs.Warn.Printf("Truncate of a closed file is not supported, returning ENOSYS\n") + return fuse.ENOSYS } func (fs *FS) Utimens(path string, Atime *time.Time, Mtime *time.Time, context *fuse.Context) (code fuse.Status) { |