[Bug 200448] GELI Passphrase prompt in boot loader does not work as expected in 10.1-STABLE

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Jul 8 09:55:15 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200448

--- Comment #3 from commit-hook at freebsd.org ---
A commit references this bug:

Author: gjb
Date: Wed Jul  8 09:54:18 UTC 2015
New revision: 285263
URL: https://svnweb.freebsd.org/changeset/base/285263

Log:
  MFC r273489 (cperciva):
   Populate the GELI passphrase cache with the kern.geom.eli.passphrase
   variable (if any) provided in the boot environment.  Unset it from
   the kernel environment after doing this, so that the passphrase is
   no longer present in kernel memory once we enter userland.

   This will make it possible to provide a GELI passphrase via the boot
   loader.

   Note: head and stable/10 differ as a result of r273174, which renames
   the getenv(), setenv(), and unsetenv() functions with kern_getenv(),
   kern_setenv(), and kern_unsetenv(), which was reverted in the relevant
   parts of this change in 10-STABLE.

  PR:        200448
  Approved by:    re (kib)
  Sponsored by:    The FreeBSD Foundation

Changes:
_U  stable/10/
  stable/10/sys/geom/eli/g_eli.c

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list