GNU GRUB - Bugs: bug #59520, Dynamically append luks key to...
You are not allowed to post comments on this tracker with your current authentication level.
bug #59520: Dynamically append luks key to initramfs to avoid having it stored on system
Submitter: | Tyson Whitehead <twhitehead> | ||
Submitted: | Mon 23 Nov 2020 04:13:10 PM UTC | ||
Votes: | 20 | ||
Category: | Security | Severity: | Major |
Priority: | 5 - Normal | Item Group: | None |
Status: | Fixed | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Open | Release: | Git master |
Release: | Reproducibility: | None | |
Planned Release: | None |
Sun 19 Sep 2021 08:02:31 PM UTC, comment #4: |
Stefan BrĂ¼ns <stefanbruens> |
Sat 19 Dec 2020 01:53:52 AM UTC, comment #3: What does (proc)/ have to do with it? I presume you're referring to (proc)/luks_script. While this does show the master key for the luks volume, how is that a solution to passing the key to the initrd environment? I do not believe that this issue is fixed, but I'd be grateful to be proven wrong. |
g10 |
Fri 18 Dec 2020 09:47:55 AM UTC, comment #2: Already implemented since several years. See files in (proc)/ |
Vladimir Serbinenko <phcoder> |
Thu 17 Dec 2020 09:43:48 PM UTC, comment #1: Seems like this might be an idea who time has come. I recently realized this earlier this year and implemented it in my setup.
|
g10 |
Mon 23 Nov 2020 04:13:10 PM UTC, original submission:
This is a security enhancement request.
|
Tyson Whitehead <twhitehead> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 20 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 2 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2021-09-19 | stefanbruens | Carbon-Copy | - | Added stefanbruens | |
2020-12-18 | phcoder | Status | None | Fixed |
Powered by Savane 3.13-4448.
Corresponding source code
@phcoder - can you please enlighten us how this works in your opinion? Please provide specific instructions, as apparently not a single distribution knows how to do this. Everyone is defaulting to storing the keyfile in /the/ initrd/initramfs.