Joe Richey

Results 31 issues of Joe Richey

The [`getrandom` crate](https://github.com/rust-random/getrandom) currently builds (but does not run) tests for `wasm32-unknown-emscripten`. Recently, cargo started putting artifacts in a different location, causing cargo-web to break when running `cargo web test`....

As one the maintainers of `getrandom`, I would advise against your `getrandom_custom` feature. Generally speaking, this feature is set by a user who is registering a custom handler (as [explained...

My use case is the following: Normally, I have a a directory (say `/mnt/foo/bar`) that is unlocked whenever I login, and is protected by my login passphrase. It uses `pam_fscrypt`...

enhancement

Right now, both automatic unlocking of directories and rewrapping of the user's login protector are done though the [PAM module](https://wiki.archlinux.org/index.php/PAM) `pam_fscrypt.so`. Specifically the following [PAM _types_](http://www.linux-pam.org/Linux-PAM-html/sag-configuration-file.html) do the following things:...

enhancement

Both github.com/urfave/cli and github.com/spf13/cobra have ways to automatically generate the bash completion information from our command structures. - [urfave/cli v2 Bash completion](https://github.com/urfave/cli/blob/master/docs/v2/manual.md#bash-completion) - [Cobra dynamic noun completion](https://github.com/spf13/cobra/blob/master/shell_completions.md#dynamic-completion-of-nouns) The best long-term...

enhancement

Fscrypt uses the [`Key struct`](https://github.com/google/fscrypt/blob/master/crypto/key.go) to keep sensitive cryptographic data locked in memory and zeroed after use. However, this would be better spun out into a separate library (as it...

enhancement

We should have a better idea of how well our code is tested. - [x] (#27) Have a way to automatically compute code coverage - [x] (#27) Add a badge...

enhancement
testing

This would be really cool, but really only makes sense for portable U2F keys Library: https://github.com/flynn/u2f

enhancement

Right now we ask two questions when running "fscrypt encrypt": 1. Do you want a new protector? 2. (If no), which existing protector would you like to use? We should...

enhancement
help wanted

[systemd-homed](https://wiki.archlinux.org/index.php/Systemd-homed) allows for [fscrypt-encrypted home directories](https://wiki.archlinux.org/index.php/Systemd-homed#fscrypt_directory). However, this does not use the fscrypt userspace tool, just the kernel functionality. We should document the tradeoffs of using `homectl` vs this tool....

documentation