While this release includes some potentially breaking changes, we don't expect this to break users in practice.
Potentially breaking changes to pam_fscrypt
module:
- #281: Remove the
drop_caches
andlock_policies
options. Thelock_policies
behavior is now unconditional, while the correctdrop_caches
setting is now auto-detected. Existing PAM files that specify these options will continue to work, but these options will now be ignored. - #278: Prioritize over other session modules. The
pam_fscrypt
session hook is now inserted into the correct place in the PAM stack whenpam_fscrypt
is configured using Debian's / Ubuntu's PAM configuration framework.
Non-breaking changes:
- #261: Add Bash completions for
fscrypt
- #275: Fix an error message
- #263: Correctly detect "incompletely locked" v1-encrypted directories on kernel versions 5.10 and later