d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2bf493863f
freebsd-dev/sbin
History
Allan Jude d873662594 Create the GELIBOOT GEOM_ELI flag 
This flag indicates that the user wishes to use the GELIBOOT feature to boot from a fully encrypted root file system.
Currently, GELIBOOT does not support key files, and in the future when it does, they will be loaded differently.
Due to the design of GELI, and the desire for secrecy, the GELI metadata does not know if key files are used or not, it just adds the key material (if any) to the HMAC before the optional passphrase, so there is no way to tell if a GELI partition requires key files or not.

Since the GELIBOOT code in boot2 and the loader does not support keys, they will now only attempt to attach if this flag is set. This will stop GELIBOOT from prompting for passwords to GELIs that it cannot decrypt, disrupting the boot process

PR:		208251
Reviewed by:	ed, oshogbo, wblock
Sponsored by:	ScaleEngine Inc.
Differential Revision:	https://reviews.freebsd.org/D5867
2016-04-08 01:25:25 +00:00
..
adjkerntz Add META_MODE support. 2015-06-13 19:20:56 +00:00
atm Fix bunch of .Xrs. 2016-03-28 16:48:28 +00:00
badsect Add META_MODE support. 2015-06-13 19:20:56 +00:00
bsdlabel It's 2015, and some people are still trying to use fdisk and then 2015-09-02 14:08:43 +00:00
camcontrol Limit RESOLUTION_MAX to INT_MAX, not UINT_MAX (all spelled out) so the 2015-10-25 04:37:00 +00:00
ccdconfig Add META_MODE support. 2015-06-13 19:20:56 +00:00
clri Add META_MODE support. 2015-06-13 19:20:56 +00:00
comcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
conscontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
ddb Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
devd Add a timestamp variable to the environment. This is when the event 2016-04-03 20:29:21 +00:00
devfs Add META_MODE support. 2015-06-13 19:20:56 +00:00
dhclient DIRDEPS_BUILD: Connect MK_TESTS. 2016-03-09 22:46:01 +00:00
dmesg Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
dump Add META_MODE support. 2015-06-13 19:20:56 +00:00
dumpfs The dumpfs(8) utility doesn't actually use disktab(5); remove it 2015-09-03 11:40:47 +00:00
dumpon Fix dumpon compatibility with dumpdev kenv 2015-11-23 14:06:21 +00:00
etherswitchcfg Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdisk It's 2015, and some people are still trying to use fdisk and then 2015-09-02 14:08:43 +00:00
fdisk_pc98 META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
ffsinfo It's 2015, and some people are still trying to use fdisk and then 2015-09-02 14:08:43 +00:00
fsck Add META_MODE support. 2015-06-13 19:20:56 +00:00
fsck_ffs Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
fsck_msdosfs fsck_msdosfs(8): Optimimize memsets 2016-04-06 15:28:26 +00:00
fsdb Add META_MODE support. 2015-06-13 19:20:56 +00:00
fsirand Add META_MODE support. 2015-06-13 19:20:56 +00:00
gbde DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
geom Create the GELIBOOT GEOM_ELI flag 2016-04-08 01:25:25 +00:00
ggate Add pidfile support to ggated(8) 2016-01-28 03:24:06 +00:00
growfs DIRDEPS_BUILD: Connect MK_TESTS. 2016-03-09 22:46:01 +00:00
gvinum Add META_MODE support. 2015-06-13 19:20:56 +00:00
hastctl DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
hastd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ifconfig Add parsing for AP channel report IE. 2016-03-18 04:22:07 +00:00
init Fix resource leaks in error cases. 2015-11-11 23:00:57 +00:00
ipf DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ipfw Set buffer to empty string to prevent duplicated output in some cases. 2016-03-09 14:47:05 +00:00
iscontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
kldconfig Add META_MODE support. 2015-06-13 19:20:56 +00:00
kldload Add META_MODE support. 2015-06-13 19:20:56 +00:00
kldstat DIRDEPS_BUILD: Update dependencies. 2016-03-21 18:02:26 +00:00
kldunload Add META_MODE support. 2015-06-13 19:20:56 +00:00
ldconfig Add ldconfig -soft to process the soft float abi libraries and put it 2016-01-18 21:40:18 +00:00
md5 Replace sys/crypto/sha2/sha2.c with lib/libmd/sha512c.c 2015-12-27 17:33:59 +00:00
mdconfig DIRDEPS_BUILD: Connect MK_TESTS. 2016-03-09 22:46:01 +00:00
mdmfs - Implement -T option to allow to specify a fs type for a vnode-backed memory disk 2016-03-11 06:07:09 +00:00
mknod Add META_MODE support. 2015-06-13 19:20:56 +00:00
mksnap_ffs Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount Fix type mismatches for malloc(3) and Co. 2015-12-29 11:24:35 +00:00
mount_cd9660 Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_fusefs Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_msdosfs Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_nfs mount_nfs: Be more clear on nmount(2) error with errmsg unset 2015-07-22 22:53:40 +00:00
mount_nullfs Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_udf Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_unionfs Fix markup. 2015-09-02 14:10:09 +00:00
nandfs META MODE: Connect MK_NAND directories. 2015-12-02 05:31:01 +00:00
natd Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
newfs It's 2015, and some people are still trying to use fdisk and then 2015-09-02 14:08:43 +00:00
newfs_msdos Fix leak in mkfs_msdos(..) by initializing img to NULL and free'ing at the end 2015-12-06 21:07:33 +00:00
newfs_nandfs META MODE: Connect MK_NAND directories. 2015-12-02 05:31:01 +00:00
nfsiod Add META_MODE support. 2015-06-13 19:20:56 +00:00
nos-tun Add META_MODE support. 2015-06-13 19:20:56 +00:00
nvmecontrol In nvmecontrol, fix gcc warnings about the local 'power' variables 2016-03-11 17:25:18 +00:00
pfctl DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
pflogd Add META_MODE support. 2015-06-13 19:20:56 +00:00
ping o Restore some good whitespace killed in the previous commit. 2016-03-18 15:44:21 +00:00
ping6 Use arc4random_buf(). While there, unifdef the code for HAVE_ARC4RANDOM. 2015-08-16 23:23:58 +00:00
quotacheck Add META_MODE support. 2015-06-13 19:20:56 +00:00
rcorder Remove r_tmp to fix a -Wunused-but-set-variable warning with gcc 4.9 2016-02-01 07:15:31 +00:00
reboot kenv(8) -> kenv(1) 2016-02-29 17:22:34 +00:00
recoverdisk Add META_MODE support. 2015-06-13 19:20:56 +00:00
resolvconf Add META_MODE support. 2015-06-13 19:20:56 +00:00
restore restore(8): fix use of uninitialized value. 2016-03-31 02:01:11 +00:00
route DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
routed META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
rtsol Now that we own the code, use arc4random(3) unconditionally 2015-10-06 23:42:58 +00:00
savecore Add more text to explain --libxo flag. 2015-12-01 19:18:53 +00:00
sconfig META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
setkey DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
shutdown Add META_MODE support. 2015-06-13 19:20:56 +00:00
spppcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
sunlabel META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
swapon Delete argsize to fix a -Wunused-but-set-variable warning with gcc 4.9 2016-02-01 08:06:17 +00:00
sysctl Add -t option to display field types. 2015-12-10 02:11:42 +00:00
tests DIRDEPS_BUILD: Connect MK_TESTS. 2016-03-09 22:46:01 +00:00
tunefs tunefs: clear the entire previous label when setting a new one 2016-03-07 19:14:26 +00:00
umount Fix type mismatches for malloc(3) and Co. 2015-12-29 11:24:35 +00:00
Makefile Convert casperd(8) daemon to the libcasper. 2016-02-25 18:23:40 +00:00
Makefile.amd64 Integrate nvmecontrol(8) into the amd64 and i386 builds. 2012-09-17 21:41:38 +00:00
Makefile.arm MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.i386 Integrate nvmecontrol(8) into the amd64 and i386 builds. 2012-09-17 21:41:38 +00:00
Makefile.inc Use src.opts.mk in preference to bsd.own.mk except where we need stuff 2014-05-06 04:22:01 +00:00
Makefile.mips MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.pc98 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00
Makefile.sparc64 MF tbemd: Move to using Makefile.arch to select what to build. 2010-09-13 02:25:21 +00:00