• [^] # Re: Keyctl, qui utilise ça ?

    Posté par . En réponse au journal faille Linux 0 day du 19 janvier 2016. Évalué à 4.

    keyctl est utilisé pour ecryptfs (pour chiffrer un répertoire).

    https://www.kernel.org/doc/Documentation/security/keys-ecryptfs.txt

    Extrait :

    Example of encrypted key usage with the eCryptfs filesystem:

    Create an encrypted key "1000100010001000" of length 64 bytes with format
    'ecryptfs' and save it using a previously loaded user key "test":

    $ keyctl add encrypted 1000100010001000 "new ecryptfs user:test 64" @u
    19184530

    $ keyctl print 19184530
    ecryptfs user:test 64 490045d4bfe48c99f0d465fbbbb79e7500da954178e2de0697
    dd85091f5450a0511219e9f7cd70dcd498038181466f78ac8d4c19504fcc72402bfc41c2
    f253a41b7507ccaa4b2b03fff19a69d1cc0b16e71746473f023a95488b6edfd86f7fdd40
    9d292e4bacded1258880122dd553a661

    $ keyctl pipe 19184530 > ecryptfs.blob

    Mount an eCryptfs filesystem using the created encrypted key "1000100010001000"
    into the '/secret' directory:

    $ mount -i -t ecryptfs -oecryptfs_sig=1000100010001000,\
    ecryptfs_cipher=aes,ecryptfs_key_bytes=32 /secret /secret-