Discussion:
Security Flaw:
(too old to reply)
Richard Bostrom
2024-07-10 07:00:01 UTC
Permalink
I cannot update my passphrase in crypttab although the passphrase is updated in the OS I cannot enter my OS without using the latest passphrase.

Yours sincerely
Richardh Bostrom
Ceppo
2024-07-10 09:10:01 UTC
Permalink
Hello!
Reading some man pages, if you used the default encryption tool when installing
Debian you should be able to change the passphrase just with this:

cryptsetup luksChangeKey <your device>

If this isn't your case, we probably need some more details to be able to help
you.
Post by Richard Bostrom
I cannot update my passphrase in crypttab
What did you try and what was the outcome?
Post by Richard Bostrom
although the passphrase is updated in the OS
How did you "update the passphrase in the OS"?
Post by Richard Bostrom
I cannot enter my OS without using the latest passphrase.
What happens when you enter the old passphrase? And what when you enter the new
one?


P.S.: you should always choose a meaningful subject for your emails. "Security
Flaw" really looks spam and is easily discarded by spam filters, and even if
the message were delivered most people would probably throw it away without
even opening it. In your case there isn't a security flaw at all, so it is also
misleading. I'm just recommending to take care of your requests, people are
willing to help but don't have enough time to manually check every suspicious
message that reaches their inbox :).


--
Ceppo
Ceppo
2024-07-10 09:20:02 UTC
Permalink
Post by Ceppo
If this isn't your case, we probably need some more details to be able to
help you.
And I forgot the most important question: how did you encrypt your disk?


--
Ceppo
David Christensen
2024-07-10 23:20:01 UTC
Permalink
Post by Richard Bostrom
I cannot update my passphrase in crypttab although the passphrase is updated in the OS I cannot enter my OS without using the latest passphrase.
Yours sincerely
Richardh Bostrom
Passphrases in crypttab(5) are for disks, disk partitions, virtual
devices, etc., and are unrelated to user passwords. Changing one does
not affect the other, and vice versa.


If you are using LUKS to encrypt a partition, LUKS supports more than
one passphrase. See cryptsetup(8). To change the passphrase, I would
add the new passphrase, reboot, and enter the new passphrase to verify.
When you are confident the new passphrase works, delete the old passphrase.


David

Loading...