| 480fcd2750c1d30f3397d1f3152519a11f60990b |
|
24-Aug-2015 |
Paul Crowley <paulcrowley@google.com> |
Set uid/gid of newly created user dirs to system/system.
Bug: 23395513
Change-Id: I3d76b77339f995103c0aec09c6de77b3c8cdc0dd
/system/vold/Ext4Crypt.cpp
|
| 9336348200758d067fed164368636521b4e58621 |
|
07-Jul-2015 |
Paul Crowley <paulcrowley@google.com> |
Evict the key before we delete it.
Change-Id: I9eef440a1f406c2c73c859f5ae7cee35f6a36ca4
/system/vold/Ext4Crypt.cpp
|
| cd307b7c6301593727892d1fa9bb92aadb5fdaca |
|
19-May-2015 |
Paul Crowley <paulcrowley@google.com> |
Scrub the key from the disk with BLKSECDISCARD.
Bug: 19706593
(cherry-picked from commit 8d0cd7ffd903a753c6bb5c6f33987a7a66621cef)
Change-Id: Ieea73da233fe53767b5adcdb4d49f9bb00fedac1
/system/vold/Ext4Crypt.cpp
|
| b33e8873ea78b92e536aa33f48130a91ca150f0c |
|
19-May-2015 |
Paul Crowley <paulcrowley@google.com> |
Add "cryptfs deleteuserkey" command to vold.
Bug: 19706593
(cherry-picked from commit eebf44563bf9c6f2795442e8d2bc886e4eb3bbbe)
Change-Id: I50dc4c39595c06bf0016d6a490130bbbc25de91b
/system/vold/Ext4Crypt.cpp
|
| 95376d612c91236c8cd751b9af02c9aa57f4870f |
|
06-May-2015 |
Paul Crowley <paulcrowley@google.com> |
Add vold commands for setting up per-user encrypted user
directories
Bug: 19704432
(cherry-picked from commit 75a5202d9f65747edabb1dd0ebd50a779d4142c2)
Change-Id: I733e8745ec21f8e53c2cc6d8a98313275db7d897
/system/vold/Ext4Crypt.cpp
|
| f25a35a1c98d4fac118ee9abe34d6bbf2d3a2201 |
|
06-May-2015 |
Paul Crowley <paulcrowley@google.com> |
Break key installation into its own function so we can install
non-master keys.
Bug: 19704432
(cherry-picked from commit 1da96dc549b86a1c7ec02d7a808a9532cdcb5fe7)
Change-Id: I762e8f6c927db3a337fa8ce6bd428262d9e05c7a
/system/vold/Ext4Crypt.cpp
|
| 86c942a2537701a90b88768eab4648c0650dfad1 |
|
06-May-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Delete password as per block encryption
(cherry-picked from commit 00f4aade5c172534c16070540d1c6c26d0a78c84)
Bug: 18151196
Change-Id: Iee0f932c61ff4a309dc2861725b24bf976adb4c7
/system/vold/Ext4Crypt.cpp
|
| 0d9cd9e9cf39e1cdb06565de6c4e11ff244b2a3a |
|
06-May-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Fix problem that reading/writing crypto footers wasn't identity
(cherry-picked from commit 75c922f49b593f3203ee59c33d00ccb5b3b66ca8)
Bug: 18151196
Change-Id: Ideef6bcdbccf068a64ed3e042be50c4837a373f8
/system/vold/Ext4Crypt.cpp
|
| 2f32cda63bf5c86db880d36029a27c8597fb5e3c |
|
05-May-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Retry unmounts in ext4 encryption
(cherry-picked from commit 29b54aab8ee2d08e2129832364f9b719dd17fa4e)
Bug: 18151196
Change-Id: I52ca23b2ce3adcff44bd003d4a12243a0bd6ac34
/system/vold/Ext4Crypt.cpp
|
| b7f0702ea6cc32c58540d596016c2dabd8ba3541 |
|
05-May-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Use default key permissions for ext4enc
(cherry-picked from commit 1190a26f6d7dd34bf10ffc7b367b374d5e591146)
As per discussion default permissions are the correct ones.
Note that since we use logon keys, they cannot be read outside
the kernel.
Note also that we limit who can read/write keys in selinux policy.
Bug: 18151196
Change-Id: Icc916f430a70eff22e6b74c20ec361c8f3789c1c
/system/vold/Ext4Crypt.cpp
|
| a56d3134b03a3756a740aa909aa3d72643196842 |
|
05-May-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Simplify password checking logic
(cherry-picked from commit aaccfac3442ab48f5f94603c07427cc1bb00e12d)
Bug: 18151196
Change-Id: I07ffde534dee7d1032149cfcbaa1a61c5246d759
/system/vold/Ext4Crypt.cpp
|
| 368d79459e8d30474dd5cbc414623c1e2f78ee98 |
|
15-Apr-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Enable properties in ext4enc
(cherry-picked from 4e7274551c93e1c064648409f52ca430da647050)
Enables OwnerInfo and pattern suppression
Bug: 18151196
Change-Id: I46144e16cb00319deeb5492ab82c67f5dd43d6d3
/system/vold/Ext4Crypt.cpp
|
| c78c71b1717613a5be921bbb8ac63c007d4af86a |
|
15-Apr-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Check password is correct by checking hash
(cherry-picked from commit 3ca21e227a2e1ed01138a29f450917290a9d1e6e)
Handle failures gracefully
Change-Id: Ifb6da8c11a86c50fb11964c18cc1be1326461f78
/system/vold/Ext4Crypt.cpp
|
| fd7db732434eb41fda69a353053bcb7aab259529 |
|
10-Apr-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE New ext4enc kernel switching from xattrs to ioctl
(cherrypicked from commit 5e7f0042318156ef39c1e4641613f3191ea85b4a)
This is one of three changes to enable this functionality:
https://android-review.googlesource.com/#/c/146259/
https://android-review.googlesource.com/#/c/146264/
https://android-review.googlesource.com/#/c/146265/
Bug: 18151196
Change-Id: Iba5146b8be1e15050ae901e08b3aaa26d96dcf7e
/system/vold/Ext4Crypt.cpp
|
| 731a7a242df6cc3441ac82b4f9521546fac5ac2d |
|
29-Apr-2015 |
Paul Lawrence <paullawrence@google.com> |
DO NOT MERGE Securely encrypt the master key
(cherry-picked from commit 707fd6c7cccc31c0ab0ec1a6ac8b6077c632fc35)
Move all key management into vold
Reuse vold's existing key management through the crypto footer
to manage the device wide keys.
Use ro.crypto.type flag to determine crypto type, which prevents
any issues when running in block encrypted mode, as well as speeding
up boot in block or no encryption.
This is one of four changes to enable this functionality:
https://android-review.googlesource.com/#/c/148586/
https://android-review.googlesource.com/#/c/148604/
https://android-review.googlesource.com/#/c/148606/
https://android-review.googlesource.com/#/c/148607/
Bug: 18151196
Change-Id: I3c68691717a61b5e1df76423ca0c02baff0dab98
/system/vold/Ext4Crypt.cpp
|