gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2018-09-08	syscallcompat: untangle OpenNofollow and rename to OpenDirNofollow	Jakob Unterwurzacher
	The function used to do two things: 1) Walk the directory tree in a manner safe from symlink attacks 2) Open the final component in the mode requested by the caller This change drops (2), which was only used once, and lets the caller handle it. This simplifies the function and makes it fit for reuse in forward mode in openBackingPath(), and for using O_PATH on Linux.
2018-08-11	reverse mode: add --exclude option	Jakob Unterwurzacher
	https://github.com/rfjakob/gocryptfs/issues/235
2017-12-11	fusefrontend_reverse: Reject access to device nodes in newFile function	Sebastian Lackner
	Steps to reproduce: * Create a regular reverse mount point * Create a file "test" in the original directory * Access the corresponding encrypted directory in the mount point (ls <encrypted dir>) * Quickly delete the file in the original data - instead create a device node * Access the file again, it will access the device node and attempt to read from it Fixes https://github.com/rfjakob/gocryptfs/issues/187
2017-12-02	fusefrontend_reverse: secure Open against symlink races	Jakob Unterwurzacher
	...using the new syscallcompat.OpenNofollow helper. This change secures Open() against symlink race attacks as described in https://github.com/rfjakob/gocryptfs/issues/165
2017-05-30	pathiv: move block IV algorithm into this package	Jakob Unterwurzacher
	This was implemented in fusefrontend_reverse, but we need it in fusefrontend as well. Move the algorithm into pathiv.BlockIV().
2017-05-30	pathiv: move derivedIVContainer into the package	Jakob Unterwurzacher
	...under the new name "FileIVs". This will also be used by forward mode.
2017-05-30	fusefrontend_reverse: move pathiv to its own package	Jakob Unterwurzacher
	We will also need it in forward mode.
2017-05-25	fusefrontend_reverse: store derived values for hard-linked files	Jakob Unterwurzacher
	With hard links, the path to a file is not unique. This means that the ciphertext data depends on the path that is used to access the files. Fix that by storing the derived values when we encounter a hard-linked file. This means that the first path wins.
2017-04-01	fusefrontend_reverse: convert fmt.Printf calls to tlog	Jakob Unterwurzacher
	The fmt.Printfs output would end up in the paniclog.
2016-11-10	Fix golint warnings	Jakob Unterwurzacher
	$ golint ./... \| grep -v underscore \| grep -v ALL_CAPS internal/fusefrontend_reverse/rfs.go:52:36: exported func NewFS returns unexported type *fusefrontend_reverse.reverseFS, which can be annoying to use internal/nametransform/raw64_go1.5.go:10:2: exported const HaveRaw64 should have comment (or a comment on this block) or be unexported
2016-10-04	lint fixes	Valient Gough

2016-09-29	reverse: use per-purpose nonce generation	Jakob Unterwurzacher
	Also pull all the deterministic nonce code into fusefrontend_reverse to greatly simplify the normal code path.
2016-09-25	tests: enable all go vet checks	Jakob Unterwurzacher
	...and fix reported errors: internal/fusefrontend_reverse/rfile.go:40: github.com/rfjakob/gocryptfs/internal/contentenc.FileHeader composite literal uses unkeyed fields internal/fusefrontend_reverse/rfs.go:249: github.com/hanwen/go-fuse/fuse.DirEntry composite literal uses unkeyed fields internal/fusefrontend_reverse/rfs.go:264: github.com/hanwen/go-fuse/fuse.DirEntry composite literal uses unkeyed fields
2016-09-25	reverse: derive file ID and block IVs from file paths	Jakob Unterwurzacher

2016-09-25	contentenc: add GCM-SIV support	Jakob Unterwurzacher
	Also add ReverseDummyNonce nonce generation.
2016-09-25	reverse: get rid of debug message	Jakob Unterwurzacher

2016-09-25	reverse: rename readFile to clearer readBackingFile	Jakob Unterwurzacher
	Also refactor the header generation for nicer code.
2016-09-25	reverse: generate file header for Read()	Jakob Unterwurzacher
	Also create virtual gocryptfs.diriv entries (no content yet).
2016-09-25	reverse: rename types to reverseXYZ	Jakob Unterwurzacher
	...to prevent confusion with the forward variants. FS -> reverseFS file -> reverseFile Also add an incomplete read implementation.
2016-09-25	reverse: add skeleton	Jakob Unterwurzacher
	Compiles but does not do much else.