Michael Halcrow wrote the following on 09/11/2007 01:45 PM: > I found the problem. > > Apache is using sendfile to pipe the contents of a file on disk to the > network socket. eCryptfs simply forwards the sendfile request down to > the lower filesystem. This results in the lower buffer getting piped > through rather than the eCryptfs buffer, so it is obviously the wrong > behavior. It's amazing that this hasn't hit anyone's radar until just > now. > > Fortunately, the fix is trivial: just redirect the eCryptfs sendfile > (or splice, depending on your kernel version) file operation to the > generic VFS function. This will send through the eCryptfs buffers, > using the existing VM machinery to bring eCryptfs pages ``uptodate'' > via the decryption execution paths already in place. > Great news! > The 20070911 release has this fix: > > http://downloads.sourceforge.net/ecryptfs/ecryptfs-20070911.tar.bz2 > I downloaded this new version but couldn't get it to compile on my system (which I just upgraded to Ubuntu Gutsy with the latest set of c libraries etc). The compile error that I get is (when compiling using install.sh):
------------------------------------------------------------------- make[2]: Entering directory `/usr/src/linux-headers-2.6.22-11-generic' CC [M] /usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs/dentry.o /usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs/dentry.c: In function ‘ecryptfs_d_revalidate’: /usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs/dentry.c:69: error: too many arguments to function ‘fsstack_copy_attr_all’ make[3]: *** [/usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs/dentry.o] Error 1 make[2]: *** [_module_/usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs] Error 2 make[2]: Leaving directory `/usr/src/linux-headers-2.6.22-11-generic' make[1]: *** [default] Error 2 make[1]: Leaving directory `/usr/local/src/ecryptfs/src/ecryptfs-20070911/ecryptfs-kernel/ecryptfs' make: *** [all-recursive] Error 1 Error building kernel module ------------------------------------------------------------------- Any idea on how I can get it to compile? -- Stefan Farestam Mobile: +46 70 649 6838 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ eCryptfs-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ecryptfs-users
