summaryrefslogtreecommitdiffstats
path: root/sys/geom/eli/g_eli_ctl.c
Commit message (Collapse)AuthorAgeFilesLines
* Bring in geli suspend/resume functionality (finally).pjd2010-10-201-2/+213
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before this change if you wanted to suspend your laptop and be sure that your encryption keys are safe, you had to stop all processes that use file system stored on encrypted device, unmount the file system and detach geli provider. This isn't very handy. If you are a lucky user of a laptop where suspend/resume actually works with FreeBSD (I'm not!) you most likely want to suspend your laptop, because you don't want to start everything over again when you turn your laptop back on. And this is where geli suspend/resume steps in. When you execute: # geli suspend -a geli will wait for all in-flight I/O requests, suspend new I/O requests, remove all geli sensitive data from the kernel memory (like encryption keys) and will wait for either 'geli resume' or 'geli detach'. Now with no keys in memory you can suspend your laptop without stopping any processes or unmounting any file systems. When you resume your laptop you have to resume geli devices using 'geli resume' command. You need to provide your passphrase, etc. again so the keys can be restored and suspended I/O requests released. Of course you need to remember that 'geli suspend' won't clear file system cache and other places where data from your geli-encrypted file system might be present. But to get rid of those stopping processes and unmounting file system won't help either - you have to turn your laptop off. Be warned. Also note, that suspending geli device which contains file system with geli utility (or anything used by 'geli resume') is not very good idea, as you won't be able to resume it - when you execute geli(8), the kernel will try to read it and this read I/O request will be suspended.
* Ignore errors from BIO_FLUSH. It might confuse users that provider wasn'tpjd2010-09-251-8/+6
| | | | | | really killed. What we really care about are write errors only. MFC after: 2 weeks
* Update copyright years.pjd2010-09-231-1/+1
| | | | MFC after: 1 week
* When trashing metadata, flush after each write.pjd2010-09-231-0/+7
| | | | MFC after: 1 week
* - Allow to specify value as const pointers.pjd2010-09-131-1/+1
| | | | - Make optional string values always an empty string.
* When deleting key, flush write cache after each overwrite, so we don'tpjd2007-05-061-0/+5
| | | | overwrite data N times in cache and only once on disk.
* Warn when user use sectorsize bigger than the page size, which will leadpjd2007-03-051-0/+4
| | | | | | | | to problems when the geli device is used with file system or as a swap. Hopefully will prevent problems like kern/98742 in the future. MFC after: 1 week
* Remove trailing spaces.pjd2006-09-301-1/+1
|
* Add 'configure' subcommand which for now only allows setting and removingpjd2006-09-161-0/+111
| | | | | | | | of the BOOT flag. It can be performed on both attached and detached providers. Requested by: Matthias Lederhofer <matled@gmx.net> MFC after: 1 week
* Remove extra arguments.pjd2006-09-161-2/+1
| | | | MFC after: 3 days
* Allow geli to operate on read-only providers.pjd2006-08-091-18/+47
| | | | | Initial patch from: vd MFC after: 2 weeks
* Allow to use the old -a option to specify an encryption algorithm to usepjd2006-06-061-13/+31
| | | | | (for backward compatibility), but print a warning to inform about the change.
* Implement data integrity verification (data authentication) for geli(8).pjd2006-06-051-11/+24
| | | | Supported by: Wheel Sp. z o.o. (http://www.wheel.pl)
* Remove trailing spaces.pjd2006-02-011-1/+1
|
* - Use better types.pjd2006-01-171-6/+6
| | | | | | - Log problems at level 0 when killing providers. MFC after: 3 days
* Check return value.pjd2006-01-171-0/+4
| | | | | Found by: Coverity Prevent(tm) MFC after: 3 days
* Allow to change number of iterations for PKCS#5v2. It can only be usedpjd2005-08-191-2/+21
| | | | | | when there is only one key set. MFC after: 3 days
* Add GEOM_ELI class which provides GEOM providers encryption.pjd2005-07-271-0/+639
For features list and usage see manual page: geli(8). Sponsored by: Wheel Sp. z o.o. http://www.wheel.pl MFC after: 1 week
OpenPOWER on IntegriCloud