ecryptfs team mailing list archive

[Dustin Kirkland <dustin.kirkland@xxxxxxxxx>]

The patch to solve this looks something like this, for these two
utilities.

The rest of the ecryptfs-* utilities should be fixed as well, in one
fail swoop.

:-Dustin

** Attachment added: "ecryptfs-utils.287906.patch"
   http://launchpadlibrarian.net/18811103/ecryptfs-utils.287906.patch

-- 
ecryptfs-setup-private should validate that the login password is correct
https://bugs.launchpad.net/bugs/287906
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: In Progress

Bug description:
Binary package hint: ecryptfs-utils

ecryptfs-setup-private should validate that the login password is correct.

Bug #259631 sort of exposed this bug.  Somewhere buried in there, we have a user who enters the wrong login password.  If they enter the same wrong password twice, ecryptfs-setup-private proceeds to use it.

This can be fixed with unix_chkpwd.

:-Dustin