Date: Sun, 5 Sep 2021 09:54:26 -0400 From: Eric McCorkle <eric@metricspace.net> To: FreeBSD Hackers <freebsd-hackers@freebsd.org>, freebsd-current <freebsd-current@freebsd.org>, freebsd-security@freebsd.org Subject: PAM module for loading ZFS keys on login Message-ID: <b4d216da-d4b8-12a6-3873-566e5044678c@metricspace.net>
next in thread | raw e-mail | index | archive | help
All, This patch creates a new PAM module that will load a ZFS key upon a successful login: https://reviews.freebsd.org/D31844. It will use the user's auth token as the key argument to loading a ZFS encryption key on a user-specific ZFS data set. This is the other side of my changeset to have autounmountd unload ZFS keys when it unloads a filesystem. (Here: https://reviews.freebsd.org/D31725) With these two changes, it should be possible to have ZFS encrypted home directories with keys dynamically loaded when users log in, and unloaded when their home directories are unmounted. Please review and comment.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b4d216da-d4b8-12a6-3873-566e5044678c>