{"id":16936559,"url":"https://github.com/jonhoo/cryptsetup-gui","last_synced_at":"2025-04-11T19:07:40.441Z","repository":{"id":5142279,"uuid":"6309081","full_name":"jonhoo/cryptsetup-gui","owner":"jonhoo","description":"Simple GUI for unlocking cryptsetup volumes","archived":false,"fork":false,"pushed_at":"2018-07-15T15:21:42.000Z","size":17,"stargazers_count":13,"open_issues_count":0,"forks_count":6,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-04-11T01:48:28.521Z","etag":null,"topics":["cryptsetup","gui","linux","luks"],"latest_commit_sha":null,"homepage":null,"language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"openstack/puppet-nova","license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jonhoo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2012-10-20T13:11:04.000Z","updated_at":"2023-08-20T16:09:27.000Z","dependencies_parsed_at":"2022-07-05T15:01:28.422Z","dependency_job_id":null,"html_url":"https://github.com/jonhoo/cryptsetup-gui","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonhoo%2Fcryptsetup-gui","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonhoo%2Fcryptsetup-gui/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonhoo%2Fcryptsetup-gui/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jonhoo%2Fcryptsetup-gui/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jonhoo","download_url":"https://codeload.github.com/jonhoo/cryptsetup-gui/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248465314,"owners_count":21108244,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cryptsetup","gui","linux","luks"],"created_at":"2024-10-13T20:57:16.977Z","updated_at":"2025-04-11T19:07:40.423Z","avatar_url":"https://github.com/jonhoo.png","language":"C","readme":"cryptsetup-gui is a fairly simple application for unlocking and mounting LUKS\nparitions with a GUI. The intended use is for mounting an encrypted home\npartition after login, but it can be used for any encrypted partition.\n\nIt is invoked with the name of an encrypted partition, looks up that name in\n/etc/crypttab to find the device, prompts the user for a password, decrypts the\ndevice and mounts it according to /etc/fstab.\n\n### Mounting /home on login ###\nIn order to enable the mounting of /home AFTER a user has logged in, we employ a\nlittle trick:\n\n  1. The user's home directory is still set to /home/#username#.\n  2. We create this directory when /home is unmounted\n  3. We add a .xinitrc file that calls cryptsetup-gui, mounts /home on top of\n     us, and then executes the \"real\" user .xinitrc\n\nThe included xinitrc file should take care of this, and is installed into\n/etc/skel. It defaults to the name of the encrypted home partition to be\n*chome*, but this can be changed by modifying the file after copying it to your\nunmounted home directory.\n\n### Security ###\n**Note:** The binary cryptsetup-gui installed into /usr/bin has the setuid\nflag enabled and is owned by root. This is so that it can be invoked by users\nand still be permitted to unlock a device. This is done on your own risk!\n\nThe application only accepts a single parameter, the name of the encrypted\ndevice, and this is enforced to be only a-z. Thus, I do not believe there to be\nany risk of that causing a security risk with setuid. The file does execute two\nshell commands using cryptsetup and luks, however the parameters for these are\nread from /etc/crypttab and /etc/fstab. Thus, **should a malicious user be able\nto modify either of these files, he/she will be able to use cryptsetup-gui to\nrun arbitrary commands as root**. That said, if they can edit those files, you\nalready have a security breach.\n\n### License ###\n*It's the standard MIT license.*\n\nCopyright (C) 2012 Jon Gjengset\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies\nof the Software, and to permit persons to whom the Software is furnished to do\nso, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n\u003c!-- vim:set textwidth=80: --\u003e\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjonhoo%2Fcryptsetup-gui","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjonhoo%2Fcryptsetup-gui","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjonhoo%2Fcryptsetup-gui/lists"}