Arch Linux

Kei

Member

Registered: 2007-04-05

Posts: 88

DM-Crypt: no support for password input on boottime

I noticed that there is no support for "none" as a password for encrypted volumes in /etc/rc.sysinit. So the password has to be specified either directly in /etc/crypttab or in a keyfile. Since my root partition isn't encrypted, this is a security issue.

I have problems with getting the password. I added some code to /etc/rc.sysinit, in the crypto section, in the function, where the lines of /etc/crypttab are parsed. "cpass" is the variable, where the password is stored.

if [ "$cpass" == "none" ]; then
echo "Password: "
read cpass
fi

However, the script just ignores the "read" command, so I never get the chance to enter anything.

thx,kei

Kei

Member

Registered: 2007-04-05

Posts: 88

Re: DM-Crypt: no support for password input on boottime

I figured it out myself and sent a patch to the mailing list.