aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2020-11-25exchange challenge filesGravatar Christian Hesse1-5/+12
This makes sure that the challenge file is never non-existent.
2020-11-25sync challenge file to disk before closingGravatar Christian Hesse1-0/+4
2020-02-08update copyright for 2020Gravatar Christian Hesse7-7/+7
2019-02-20prepare version 0.7.60.7.6Gravatar Christian Hesse1-1/+1
2019-02-18completly replace rand() with getrandom()Gravatar Christian Hesse1-12/+10
2019-02-18do not use hardcoded sizeGravatar Christian Hesse1-1/+1
2019-02-18replace getrandom() with getentropy()Gravatar Christian Hesse1-1/+1
2019-02-17Seed with real random numberGravatar Christian Hesse1-5/+7
2019-01-01update copyright for 2019Gravatar Christian Hesse7-7/+7
2018-08-14release: add comment with file name to signaturesGravatar Christian Hesse1-3/+3
2018-06-14update dependencies' upstream urlsGravatar Christian Hesse1-5/+5
2018-06-11prepare version 0.7.50.7.5Gravatar Christian Hesse1-1/+1
2018-06-08remove trailing spaces, update urlGravatar Christian Hesse1-2/+2
2018-06-08update .gitignoreGravatar Christian Hesse1-0/+4
2018-06-08make gitlab.com a mirrorGravatar Christian Hesse1-2/+6
https://blog.github.com/2018-06-04-github-microsoft/
2018-06-06release: write tar signature to git notesGravatar Christian Hesse1-0/+1
2018-04-01fix compiler warning/error with GCC 8.xGravatar Christian Hesse1-1/+1
GCC 8.x reports: worker.c:66:2: error: 'strncpy' specified bound 108 equals destination size [-Werror=stringop-truncation] Replace strncpy() with memcpy(), fixes #25.
2018-03-14drop grub workaround, use upstream support for multiple early initrd imagesgrub-2-04Gravatar Christian Hesse4-27/+18
This requires grub upstream support for multiple early initrd images: http://git.savannah.gnu.org/cgit/grub.git/commit/?id=a698240df0c43278b2d1d7259c8e7a6926c63112
2018-01-29improve systemd notification handlingGravatar Christian Hesse1-1/+3
2018-01-22prepare version 0.7.40.7.4Gravatar Christian Hesse1-1/+1
2018-01-19less conditions for string duplicationGravatar Christian Hesse1-4/+4
This makes sure second_factor is not NULL and prevents later NULL dereferences. Fixes #23.
2018-01-02update copyright for 2018Gravatar Christian Hesse7-7/+7
2017-11-25link required libraries onlyGravatar Christian Hesse1-6/+6
2017-11-25prepare version 0.7.30.7.3Gravatar Christian Hesse1-1/+1
2017-11-22use printf to generate version.hGravatar Christian Hesse1-3/+1
2017-11-21prevent systemd from reporting failed with result 'protocol'Gravatar Christian Hesse1-3/+5
A systemd service with Type=notify expects READY=1.
2017-10-30allow access to the service status notification socketGravatar Christian Hesse1-0/+1
2017-10-30update the logic for second factorGravatar Christian Hesse1-9/+20
2017-10-30make sure the worker is run from systemd serviceGravatar Christian Hesse3-3/+16
2017-10-30add missing header commentGravatar Christian Hesse1-0/+5
2017-10-20use annotated (and signed) tags onlyGravatar Christian Hesse1-1/+1
2017-10-06prepare version 0.7.20.7.2Gravatar Christian Hesse1-1/+1
2017-09-22run ykfde-worker after ykfde-2f, but do not requireGravatar Christian Hesse1-1/+0
2017-09-22sleep and pkill are no longer requiredGravatar Christian Hesse3-6/+0
2017-09-22... same for dracutGravatar Christian Hesse1-2/+2
2017-09-22we always need the workerGravatar Christian Hesse1-2/+2
2017-09-16update for recent keyring changes in systemdsystemd-v235Gravatar Christian Hesse4-1/+4
With systemd v235 we will have new KeyringMode= for services. Setting KeyringMode=shared allows to share secrets between services. Use that for our services. As udev is not started with a shared keyring we can not run the worker directly. Instead always start the service.
2017-07-04prepare version 0.7.10.7.1Gravatar Christian Hesse1-1/+1
2017-07-03undo the changes with session keyringsystemd-v234Gravatar Christian Hesse1-16/+1
The keyring handling has been fixed with systemd v234, so revert using the session keyring.
2017-07-03prepare version 0.7.00.7.0Gravatar Christian Hesse1-1/+1
2017-06-22do not track changes in /etc/ykfde.d/Gravatar Christian Hesse2-1/+4
2017-06-22rename the worker programGravatar Christian Hesse9-33/+17
This is no longer just udev... So rename and move.
2017-06-22wipe second factor from memoryGravatar Christian Hesse1-0/+1
2017-06-20Rework the code, update keyring handlingsystemd-v233Gravatar Christian Hesse6-194/+208
This had some historical issue... So rework the code: * split into more functions * drop the sleep and notify logic * update keyring handling Depending on setup and systemd version (233 and up) the keyring handling fails. Try to fix this by... * writing to session keyring first * setting permissions * linking to user keyring * unlinking from session keyring https://mjg59.dreamwidth.org/37333.html
2017-06-20Revert "request key from user keyring"Gravatar Christian Hesse1-1/+1
This reverts commit e90e36ae106b4c6ff30a6ce0c0b1d03a5615a363. The argument expects a destination keyring to create a key in case it is not found. So keep the zero, which means not to create a key.
2017-06-14invert conditionGravatar Christian Hesse1-8/+5
2017-06-14FIX: save old termio structure properlyGravatar Benjamin Pereto1-2/+2
2017-04-28Updated ykfde.c to silently skip terminal updates when tcgetattr fails so ↵Gravatar Alec Lanter1-14/+20
that keys can be piped through from other commands.
2017-03-08use https for my mirrorGravatar Christian Hesse1-1/+1
2017-03-02request key from user keyringGravatar Christian Hesse1-1/+1
2017-03-02share memory for passphrase and askpass answerGravatar Christian Hesse1-9/+7
2017-03-02systemd-ask-password: give id as suggested by man pageGravatar Christian Hesse1-1/+1
2017-03-02update copyright for 2017Gravatar Christian Hesse6-6/+6
2016-07-09prepare version 0.6.40.6.4Gravatar Christian Hesse1-1/+1
2016-07-07Small grammar and instruction updatesGravatar Steve Divskinsy2-42/+62
Modified a bit of grammar, added a clarifying paragraph or two, and added a working HOOKS example Signed-off-by: Christian Hesse <mail@eworm.de>
2016-07-06proper clean up of resourcesGravatar Christian Hesse1-7/+15
2016-07-06fix some misc issuesGravatar Christian Hesse1-8/+10
2016-07-06simplify error pathGravatar Christian Hesse1-2/+1
2016-07-06open the Yubikey when neededGravatar Christian Hesse1-11/+57
Some key do an unplug/plug sequence after challenge/response. Thus the second challenge/response failed. So let's open the key only when needed and have a clean context.
2016-07-06update dracut for latest codeGravatar Christian Hesse1-3/+5
Did I get everyting? This is untested...
2016-05-28add EditorConfig configurationGravatar Christian Hesse1-0/+18
2016-05-28indent with tabsGravatar Christian Hesse3-17/+17
2016-05-28Merge branch 'systemd-units'Gravatar Christian Hesse6-29/+31
2016-05-28install systemd unit file without execute permissionGravatar Christian Hesse1-1/+1
2016-05-22do not install ykfde-2f but ykfde-notify.serviceGravatar Christian Hesse1-1/+1
2016-05-22update dependenciesGravatar Christian Hesse1-1/+3
2016-05-22add comment about sleepGravatar Christian Hesse1-0/+3
Is there any better way than sleeping?
2016-05-22do not write password to logsystemd-v230Gravatar Christian Hesse1-1/+1
This requires systemd-ask-password with option --no-output, so it depends on systemd v230 (or commit a5a4e365).
2016-05-22fix start order of unitsGravatar Christian Hesse1-0/+1
2016-05-22drop shell script and implement with systemd unitsGravatar Christian Hesse4-27/+23
2016-05-06use own function to ask for LUKS passphraseGravatar Christian Hesse1-5/+11
2016-05-06prepare version 0.6.30.6.3Gravatar Christian Hesse1-1/+1
2016-05-06make ykfde-cpio depend on version.hGravatar Christian Hesse1-1/+1
2016-05-06give hint we want the *current* second factorGravatar Christian Hesse1-1/+1
2016-05-04update documentation again, give real exampleGravatar Christian Hesse2-16/+20
2016-05-04update help outputGravatar Christian Hesse2-2/+3
2016-05-04update documentationGravatar Christian Hesse2-16/+24
* Use long version of switches. * Use --new-2nd-factor (instead of --2nd-factor) for initialization.
2016-05-04move terminal input to function, verify matching strings for new factorGravatar Christian Hesse1-37/+49
2016-05-04simplify code structureGravatar Christian Hesse1-47/+49
2016-05-04simplify return code handlingGravatar Christian Hesse3-67/+30
We do not return the return codes from library functionen, but that is not a big issue...
2016-05-04support reading second factor from terminalGravatar Christian Hesse3-17/+78
This increases security by not displaying on display and not writing to shell history.
2016-05-04do not allow to give second factor twiceGravatar Christian Hesse1-0/+12
2016-05-04fix error condition for yk_close_key() and yk_release()Gravatar Christian Hesse2-4/+4
2016-05-04fix error condition for yk_init()Gravatar Christian Hesse2-4/+6
2016-05-04fix error condition for yk_get_serial()Gravatar Christian Hesse2-2/+4
2016-05-03prepare version 0.6.20.6.2Gravatar Christian Hesse1-1/+1
2016-05-03add empty line for indentionGravatar Christian Hesse1-0/+1
2016-05-03fix error condition for yk_challenge_response()Gravatar Christian Hesse2-9/+12
2016-05-03do not crypt_free() when crypt_status() failsGravatar Christian Hesse1-1/+1
2016-05-03make ykfde-cpio understand command parametersGravatar Christian Hesse2-2/+35
2016-05-03fix compiler and linker flags and produce binaries with full RELROGravatar Christian Hesse2-2/+4
2016-05-03warn when second factor is preocessed but not enabled in configGravatar Christian Hesse1-0/+5
2016-05-03define new constant for max second factor lengthGravatar Christian Hesse1-2/+3
2016-04-04prepare version 0.6.10.6.1Gravatar Christian Hesse1-1/+1
2016-04-04do not write second factor to stdout (and log to journal)Gravatar Christian Hesse1-1/+1
Signed-off-by: Christian Hesse <mail@eworm.de>
2016-04-04let systemd-ask-password add the key to store and drop keyctlsystemd-v227Gravatar Christian Hesse2-4/+1
Signed-off-by: Christian Hesse <mail@eworm.de>
2016-04-04prepare version 0.6.00.6.0Gravatar Christian Hesse1-1/+1
2016-02-26shell and commands are required for second factor onlyGravatar Christian Hesse1-7/+7
2016-02-25README-mkinitcpio: emphasize we need a systemd-enabled initramfsGravatar Aron Widforss1-2/+3
close #4 Signed-off-by: Christian Hesse <mail@eworm.de>
2016-02-25make sure we have shell and commands in initramfsGravatar Christian Hesse1-0/+7
fix #5
generated by cgit v1.2.3-70-g09d2 (git 2.47.1) at 2024-11-25 19:15:59 +0000