From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760508AbcINJoI (ORCPT ); Wed, 14 Sep 2016 05:44:08 -0400 Received: from mout.gmx.net ([212.227.15.19]:62049 "EHLO mout.gmx.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751433AbcINJoG (ORCPT ); Wed, 14 Sep 2016 05:44:06 -0400 To: linux-ext4@vger.kernel.org Cc: Linux Kernel From: =?UTF-8?Q?Toralf_F=c3=b6rster?= Subject: ext4 encrypted dir becomes sickish after 4-5 days Message-ID: <0951cedc-fff1-682c-daca-b9a1734e43e2@gmx.de> Date: Wed, 14 Sep 2016 11:44:02 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:zhHZbsDqoGT4wajTsoQ2JHF41N7D+3AxemLXRvdX/6SnAOieZ5a ibQylVagYYavoRQhgb13BjrQxVnahJ7mdwibLFH41OIl3y+DBbFNKnxTm0nfkj53mOe7FPN iMNPEg9UQ5QJQtyeCejU7oeG2uLVFP3fSc6bZRuoBd73mHfWjeogbiR0utO57+gCKVVBMks hAXh2TdGxVehmMLA/y26w== X-UI-Out-Filterresults: notjunk:1;V01:K0:q2NhgF4aFwM=:Xa6DX/ltRTwM4vkgkCDYcY SJTuPclyr7GurhRQdUB2TWS7WZlsFa9Df6XDt3l4pyPugvuTlMvEImUb6OyTFdIkYyMEv93Xv Ipm1A7v/Fs/InRKbAq6N2E0hMll7xb4iBFjdHMU8OdzdMlBj6eJMNkN1TJSbKtlerwy54Ur0k SBG1sP0Kx3XCHt+dttJ0kLkqwZk89JN2IkenanxupyP68uP/8hU43bNsItZi8eou93SXKdQNk ieRjYmUSBvXVmH0sn3qxPA6rc9TSFj0vgQZjUoZ8mJvKfsO8/WUDr+rbYoBfy/9Sq27uS5lJF q6Bmbp6zm0T/A2Uwo54X2vF6/KnMQs2joT/hzB04hKxF/CAHxmX+2kLa1kd7/YhTCyZkvYiLi cBVwZ+p82Lyt7SFzO2ZNjHjXShJooEAwoF6mUjr3JR0fk0vd0c+XFNQaz3EqIwht9s9bB7pQv WoWYYuQ5eNom5YaFWRkmtqDnPFwszkS/EyIgULiP8QEYkVeFmNR2zf5Z+SS96YVKXfcDFwYo4 KRdCZX9Cr8AjvQ4LNYZ3zVX8CAv3Mdv+F29lGFfXriEB6heOPiDSmuo3HJTcDSC6A8i1X38eK HjP040wbbJvjTl0QKnJ4Po14Ex5g+X7KUzrJHRm1Xe4ubfqSqXO4oNSA3HyzcrExJq5t8ePy1 uvfs6qrW9gPxF1ibCy1JbY3NzLKm2uBLi5G590R7lizYBffwX14M/DzYn82wsjb3p0RQaTIS/ 5f5DN8hwLlf9hXhyUFPaC/0VzsQXB1grrrvgq1pQPuJ3l4/TdrhQEVrCOGGF4W7yie83HyHVb 2cZjl2l Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org I do run a hardened stable Gentoo Linux server w/ kernel 4.7.3-ahrdened-r1 where I use an ext4fs directory /var/lib/tor in the following way : scp ~/.cryptoSalt user@host:/tmp cat /tmp/.cryptoPass | ssh user@host 'sudo -u tor e4crypt add_key -S $(cat /tmp/.cryptoSalt) /var/lib/tor && sudo /etc/init.d/tor start; rm /tmp/.cryptoSalt' Works fine after reboot. But after 4 days or so a restart of the service "tor" fails with messages like : Sep 14 11:27:10.000 [warn] Could not open "/var/lib/tor/data/keys/secret_id_key": Required key not available Sep 14 11:27:10.000 [warn] Error reading private key from "/var/lib/tor/data/keys/secret_id_key" Sep 14 11:27:10.000 [err] Error loading private key. Sep 14 11:27:10.000 [err] Error initializing keys; exiting Sep 14 11:27:10.000 [warn] Couldn't open "/var/lib/tor/data/state.tmp" (/var/lib/tor/data/state) for writing: Required key not available Sep 14 11:27:10.000 [warn] Unable to write state to file "/var/lib/tor/data/state"; will try again later No way to get it repaired other than rebooting the machine. Any hints ? -- Toralf PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7