FS#3923 - /etc/crypttab doesn't provide column for cryptsetup options

Attached to Project: Arch Linux
Opened by Michal Krenek (Mikos) - Tuesday, 07 February 2006, 16:36 GMT
Last edited by Judd Vinet (judd) - Tuesday, 07 February 2006, 18:21 GMT
Task Type Feature Request
Category System
Status Closed
Assigned To Judd Vinet (judd)
Architecture not specified
Severity Low
Priority Normal
Reported Version 0.7.1 Noodle
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

It is great that initscripts supports encrypted partitions, but this support is useless for me, because I can't specify other options for cryptsetup in /etc/crypttab file. There should be extra column for cryptsetup options.

For example I am using these cryptsetup options (because it brings better security and protection against watermark attacks):
-h sha256 --cipher=aes-cbc-essiv:sha256

Is it possible to add new column for for cryptsetup options to /etc/crypttab file? It shouldn't be hard...
This task depends upon

Closed by  Judd Vinet (judd)
Friday, 21 July 2006, 19:43 GMT
Reason for closing:  Implemented
Additional comments about closing:  There's a version in Testing that supports a fourth "options" column.

mkinitrd has not been updated yet, but mkinitcpio should support additional cryptsetup options.
Comment by Michal Krenek (Mikos) - Tuesday, 07 February 2006, 20:03 GMT
Another remark - there is same problem with /etc/mkinird.conf, you can't specify cryptsetup options here too.

Btw. maybe it will be sufficient to add 2 columns to /etc/cryptsetup - one for hash function and one for cipher. It should be easier, because then there aren't whitespaces.
Comment by Michal Krenek (Mikos) - Tuesday, 07 February 2006, 20:04 GMT
Correction: /etc/mkinitrd.conf ;-)
Comment by ... (nGerrit) - Thursday, 20 July 2006, 08:23 GMT
something new on this one? i would really like to use it

Loading...