shellcheck
This commit is contained in:
@@ -10,12 +10,14 @@ PASSPHRASE="${ECRYPTFS_PASSPHRASE:-$(/usr/bin/base64 /dev/urandom |/usr/bin/head
|
||||
KEY="${ECRYPTFS_KEY:-passphrase:passphrase_passwd=${PASSPHRASE}}"
|
||||
FNEK_SIG="${ECRYPTFS_FNEK_SIG:-$(printf "%s" "${PASSPHRASE}" |/usr/bin/ecryptfs-add-passphrase --fnek - |/usr/bin/awk '$5 == "sig" && NR == 2 {print substr($6,2,16)}')}"
|
||||
|
||||
# ecryptfs already mounted ?
|
||||
grep -q "${LOWER_DIR} ${UPPER_DIR} ecryptfs " /proc/mounts 2>/dev/null && break
|
||||
# if not already mounted
|
||||
if ! grep -q "${LOWER_DIR} ${UPPER_DIR} ecryptfs " /proc/mounts 2>/dev/null; then
|
||||
|
||||
mkdir -p "${LOWER_DIR}" "${UPPER_DIR}"
|
||||
# create mount point
|
||||
mkdir -p "${LOWER_DIR}" "${UPPER_DIR}"
|
||||
|
||||
/bin/mount -t ecryptfs -o \
|
||||
# mount ecryptfs
|
||||
/bin/mount -t ecryptfs -o \
|
||||
key="${KEY}",\
|
||||
no_sig_cache,\
|
||||
ecryptfs_cipher="${CIPHER}",\
|
||||
@@ -25,10 +27,11 @@ ecryptfs_fnek_sig="${FNEK_SIG}",\
|
||||
ecryptfs_key_bytes="${KEY_BYTES}",\
|
||||
ecryptfs_passthrough=n,\
|
||||
ecryptfs_unlink_sigs\
|
||||
"${LOWER_DIR}" "${UPPER_DIR}" 1>/dev/null
|
||||
"${LOWER_DIR}" "${UPPER_DIR}" >/dev/null
|
||||
|
||||
# Overwrite sensible variables with random data
|
||||
ECRYPTFS_KEY="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
ECRYPTFS_PASSPHRASE="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
KEY="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
PASSPHRASE="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
# Overwrite sensible variables with random data
|
||||
ECRYPTFS_KEY="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
ECRYPTFS_PASSPHRASE="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
KEY="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
PASSPHRASE="$(/usr/bin/base64 /dev/urandom |/usr/bin/head -c 64)"
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user