Mounir IDRASSI 5ef04ad2d0 Linux: enforce read-only protection on native mount devices ...

Pass --readonly to dmsetup for every cipher layer using the opened volume's protection, including access-error fallback. Use the same protection for the container loop and filesystem, and keep hidden-volume protection on FUSE.

Remove the losetup retry that silently drops -r. Add regression tests linked to the production backend and disposable-VM coverage for file and virtual-device hosts, cascades, filesystem-free mounts, writable mounts, FUSE, and failed setup cleanup.

2026-10-22 10:54:22 +09:00

..

bench.bat

Use “unmount” instead of “dismount” in scripts and in text shown to the user. (#1548)

2025-05-31 23:06:30 +09:00

encryption_thread_pool_exception_test.cpp

Unix: complete pool work when exception capture fails

2026-10-16 21:26:21 +09:00

encryption_thread_pool_lifecycle_test.cpp

Unix: drain encryption pool users before shutdown

2026-10-16 21:17:31 +09:00

fuset_startup_faults.c

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

linux_mount_read_only_test.cpp

Linux: enforce read-only protection on native mount devices

2026-10-22 10:54:22 +09:00

linux_user_fuse_fixture.c

Tests: add a root test for volume files on user-only FUSE mounts

2026-10-13 14:36:45 +09:00

macos_cleanup_state_test.cpp

macOS: harden volume discovery and FUSE-T teardown

2026-09-28 03:17:28 +02:00

macos_process_test.cpp

macOS: harden volume discovery and FUSE-T teardown

2026-09-28 03:17:28 +02:00

macos_volume_state_test.cpp

macOS: harden volume discovery and FUSE-T teardown

2026-09-28 03:17:28 +02:00

README-macos-lifecycle.md

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

response_apdu_test.cpp

Security tokens: wipe APDU buffers throughout their lifetime

2026-10-15 00:09:13 +09:00

test_backup_header_retry.py

Unix: preserve automatic backup-header errors

2026-09-28 15:23:50 +02:00

test_byte_order_interop.py

Tests: verify rejected passwords leave volumes unchanged

2026-10-09 21:16:17 +09:00

test_encryption_thread_pool_exceptions.py

Unix: complete pool work when exception capture fails

2026-10-16 21:26:21 +09:00

test_encryption_thread_pool_lifecycle.py

Unix: drain encryption pool users before shutdown

2026-10-16 21:17:31 +09:00

test_fuset_aux_directory.py

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

test_fuset_cleanup.py

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

test_fuset_dismount.py

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

test_linux_fuse_fsync.py

Linux: forward FUSE volume fsync to the backing storage

2026-10-03 20:33:03 +09:00

test_linux_loop_identity.py

Linux: release only the volume's own loop and device-mapper devices

2026-10-11 22:33:20 +09:00

test_linux_mount_read_only.py

Linux: enforce read-only protection on native mount devices

2026-10-22 10:54:22 +09:00

test_linux_privilege_helpers.py

Linux: secure NixOS helper lookup and report blocked elevation

2026-10-10 22:25:42 +09:00

test_linux_read_only_integration.py

Linux: enforce read-only protection on native mount devices

2026-10-22 10:54:22 +09:00

test_linux_requester_access.py

Tests: add a root test for volume files on user-only FUSE mounts

2026-10-13 14:36:45 +09:00

test_linux_requester_helper.py

Tests: add a root test for the requester helper

2026-10-13 14:36:46 +09:00

test_macos_discovery.py

macOS: harden volume discovery and FUSE-T teardown

2026-09-28 03:17:28 +02:00

test_macos_gui_inactivity.py

macOS: harden volume discovery and FUSE-T teardown

2026-09-28 03:17:28 +02:00

test_macos_gui_lifecycle.py

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

test_macos_gui_teardown.py

macOS: isolate FUSE-T auxiliary mount paths

2026-09-29 10:01:37 +02:00

test_volume_read.py

Tests: read known data from the test volumes without mounting (#1907)

2026-10-11 18:50:22 +09:00

test_windows_header_cleanup.py

Release header allocations after early setup failures

2026-10-16 21:27:25 +09:00

test_windows_kdf_completion.py

Windows: drain encryption pool users before shutdown

2026-10-16 18:22:09 +09:00

test_wxbuild_jobs.py

Tests: cover wxWidgets job sharing and OpenWrt serial builds

2026-10-10 12:26:38 +09:00

test_xmlvalidate.py

Translations: restore key coverage and fix XML validation

2026-10-04 11:18:54 +09:00

test.blake2s.hc

Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers.

2024-07-25 14:22:39 +02:00

test.sha256.hc

Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers.

2024-07-25 14:22:39 +02:00

test.sha512.hc

Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers.

2024-07-25 14:22:39 +02:00

test.streebog.hc

Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers.

2024-07-25 14:22:39 +02:00

test.whirlpool.hc

Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers.

2024-07-25 14:22:39 +02:00

volume_read_test.cpp

Tests: cover uneven reads with 32 workers

2026-10-11 20:15:46 +09:00

windows_header_cleanup_test.c

Release header allocations after early setup failures

2026-10-16 21:27:25 +09:00

windows_kdf_completion_test.c

Release header allocations after early setup failures

2026-10-16 21:27:25 +09:00