encfs hangs

mattydee · 01-14-2007, 04:02 PM

I installed encfs on Slackware (with fuse and rlog) and everything seemed to be working fine. Haven't used it in a while, but now when I try to mount my encrypted file, encfs hangs after password. When I enter the wrong password, it tells me so and exits.

I have checked that

Code:

lsmod | grep fuse

shows that the fuse module is present.

Where should I go from here?

unSpawn · 01-15-2007, 03:55 AM

Where should I go from here?
When did this occur? What happened? Did you make and mount the EncFS with an earlier kernel and Fuse? If so, can you check if that combo still works? Else try troubleshooting encfs: add encfs flag "-v" for more verbosity. If that doesn't show unexpected results maybe add "-d" (and "-f") as well.

mattydee · 01-15-2007, 12:48 PM

Quote:

Originally Posted by unSpawn

When did this occur?

Quote:

Originally Posted by mattydee

Haven't used it in a while, but now when I try to mount my encrypted file...

So it was working fine when I first installed it. Then after some period of inactivity (about a week), I tried to use it yesterday, and it didn't work.

Quote:

Originally Posted by unSpawn

What happened?

Quote:

Originally Posted by mattydee

when I try to mount my encrypted file, encfs hangs after password

So after I encfs asks me the password, I proceed to type said password with keyboard. I press the ENTER key, and then the encfs hangs, which means that it does not respond anymore and there is no blinking cursor or prompt.

Quote:

Did you make and mount the EncFS with an earlier kernel and Fuse? If so, can you check if that combo still works?

I don't think so: my kernel is 2.6.19 and fuse is 2.6.1. I will check to see if there are known problems with this combo...

The results of encfs -vdf:

Code:

matty@slackmatt:~$ encfs -v ~/crypt-raw/ ~/private/
10:25:01 (main.cpp:642) Root directory: /home/matty/crypt-raw/
10:25:01 (main.cpp:643) Fuse arguments: (daemon) (threaded) (keyCheck) encfs /home/matty/private/ -s -o use_ino -o default_permissions
10:25:01 (Interface.cpp:165) checking if ssl/aes(2:1:1) implements ssl/blowfish(2:1:1)
10:25:01 (Interface.cpp:165) checking if ssl/blowfish(2:1:1) implements ssl/blowfish(2:1:1)
10:25:01 (SSL_Cipher.cpp:322) allocated cipher ssl/blowfish, keySize 20, ivlength 8
10:25:01 (FileUtils.cpp:1298) useStdin: 0
EncFS Password:
10:25:31 (FileUtils.cpp:1309) configuration key size = 32
10:25:31 (FileUtils.cpp:1310) cipher key size = 32
10:25:31 (Interface.cpp:165) checking if nameio/block(3:0:1) implements nameio/block(3:0:1)

As you can see, it hangs at "checking if nameio/block(3:0:1) implements nameio/block(3:0:1)"

Thanks

unSpawn · 01-15-2007, 03:02 PM

Hmm. Nothing spectacularly interesting there. Could you test making a brand new EncFS dir, and see if you can mount it, preferably somewhere else.

mattydee · 01-15-2007, 08:30 PM

Quote:

Originally Posted by unSpawn

Hmm. Nothing spectacularly interesting there. Could you test making a brand new EncFS dir, and see if you can mount it, preferably somewhere else.

I tried making a new EncFS dir, but again EncFS hung up after I typed in the password confirmation at "Verify Encfs Password: " prompt... so I can't even make a new one.

I will try recompiling and installing EncFS.

mattydee · 01-15-2007, 09:51 PM

Recompiling and installing didn't work...

unSpawn · 01-16-2007, 05:23 AM

can't even make a new one. / Recompiling and installing didn't work.
So what we got is a system that worked, then after a week it doesn't. So something changed within that period.

- Did you update any apps?
- Or run any security or audit apps?
- Any sysctls or limits changed?
- Does syslog say anything?

- Do you run SELinux, GRSecurity or LIDS or any other security framework?
- Right after the "checking if nameio/block implements" line 'fusermount' is called to actually glue the mount. Are there by any chance multiple fusermount binaries available? Is the perm octal 4755?
- Just to make sure: did you remove, then install all three of them (Fuse, EncFS and Rlog)?
- Any changing of permissions? What's the perm on the EncFS dir and it's mountpoint (octal 0700 or 0750)?

- Can you force an error by setting the EncFS dir and it's mountpoint to octal 0500?
- Can you make or mount an EncFS as root account user?
- What does running "strace -f -ff -v -v -o encfs.strace encfs ~/crypt-raw/ ~/private/ -vdf" return? Reset the perms back to normal first and scrub your "encfs.strace" output since it will show the passphrase, you're looking for something like 'grep -v "No such" encfs.strace* | grep -e "\-1.*E"'.

mattydee · 01-19-2007, 07:10 PM

Weird closure to this problem:

After reinstalling everything, I kept receiving the same error. I had given up on this (or at least decided to put it on the back burner for a while), when I decided to try one more time this morning...

After entering the passphrase, EncFs complained about the fuse module not being loaded. When I tried to load it, fuse.ko had just disappeared somehow...?? (It was there before: see my previous post). I just copied the fuse.ko from my 2.6.19 source folder to the appropriate directory in lib/modules, and now everything is working again...