|Summary:||[Patch] GELI boot-time unlock fails with separate passphrase and keyfile|
|Component:||kern||Assignee:||freebsd-bugs mailing list <bugs>|
|Severity:||Affects Only Me|
Description cyberleo 2014-09-14 03:17:49 UTC
Created attachment 147290 [details] Patch to modify GELI boot time unlock behaviour Just realized I never upstreamed this patch. I've been using it for about half a year without issue. If a container has a keyfile in one slot and a passphrase in the other, the boot-time unlock code will get confused and assume they are to be combined, resulting in a container that cannot be unlocked during boot when its keyfile is preloaded.