-
Notifications
You must be signed in to change notification settings - Fork 15
/
ChangeLog
127 lines (108 loc) · 7.13 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
2023-05-14 Jonas Stein <[email protected]>
* Version upgraded to 2.0.0
* define C++17 as minimal C++ version
* build manpage with pandoc
* Add license information according to the SPDX standard
* Dropped AIX support. If you can test and develop code for AIX, please contact us.
* Added bash completion
* New syntax
* Added missing includes
* Special thanks to James Wilson, Paweł Marciniak, Christian Reiss and Alvaro Muñoz
2022-04-25 Jonas Stein <[email protected]>
* Version upgraded to 1.1.1
* Testframework Catch added
* Fixed bug (mixed HEX macro and std::hex)
* More constants marked with const
2022-04-22 Jonas Stein <[email protected]>
* Version upgraded to 1.1.0
* Code cleanup
* Use /dev/random to create a key
2020-06-16 Jonas Stein <[email protected]>
* Version upgraded to 1.0.8
* Merged patches to fix make files and provide more error messages
2018-02-13 Jonas Stein <[email protected]>
* Merged patches from various sources
* move from SF to github in cooperation with John Coleman
2017-11-20 Adam Nielsen <[email protected]>
* Add patch which fixes double free bug (import from upstream git)
2017-11-19 Denys Berkovskyy <[email protected]>
* Add patches which enable compilation of stenc on kfreebsd architecture. The changes include addition of FreeBSD detection to configure.ac and modification of source code to use FreeBSD specific includes.
* Bump standards version to 4.1.1. Switch to the https form of the copyright-format URL in the Format field of debian/copyright file.
* Add patches to fix lintian warnings (fix typo in manpage and rename configure.in to configure.ac)
* Add patch to fix inclusion of standard headers on non-linux systems (Closes: Debian bug 881781)
2014-01-06 John Coleman <[email protected]>
* Version upgraded to 1.0.7
* Included unistd.h in scsiencrypt.cpp to prevent compile issue on ArchLinux per report by [email protected]
* Remove the --enable-swapbit and modified code to use the BYTE_ORDER and__BYTE_ORDER macros
* -kd argument added to specify a uKAD via command line
* -k option now required to set the output key file when using the -g option
* status is now simplified, --detail argument added to restore previous behavior
* the program now sets the umask when creating a new key file to prevent other users from being able to read it
* Some devices will issue an I/O error on the first command sent to the device after a tape is inserted. Modified the program to retry 1 time if the first command fails.
2012-02-29 John Coleman <[email protected]>
* Version upgraded to 1.0.6
* The --protect option now should work properly and the --unprotect option has been added. If you specify neither, the drive will use it's default.
* Sense data now always returns properly
* Fixed a number of problems related to bit ordering in structures
* Added the --enable-swapbit configure option to fix problems on AIX with the bit ordering being reversed in the structures. The program will now error out if it detects the program was compiled with the wrong option.
* Added the --with-default-algorithm configure option to specify a default algorithm, so you don't have to do it with each set operation
* Added the --with-default-ceem configure option in order to specify a different CEEM flag other than the drive default.
* Added the --disable-device-name-conversion configure option to prevent the program from converting device names to rewinding device names
* Added the --with-default-keysize configure option to specify the keysize to send to the drive when turning encryption off
2012-02-24 John Coleman <[email protected]>
* Version upgraded to 1.0.5
* Updated manual to reflect that stenc may not work if there is no tape in the device
* Updated manual to reflect that keys are no longer padded
* The program will now seek up to 100 blocks on the tape drive in order to determine the volume encryption status. The tape will be returned to the previous position after the status is returned.
* The program now automatically converts /dev/st* device names to /dev/nst* and /dev/rmt* device names to /dev/rmt*.1 to prevent rewinding.
* Updated --with-static-libgcc configure option to work on AIX
2012-02-22 John Coleman <[email protected]>
* Version upgraded to 1.0.4
* Fixed a compliler warning related to the seeding the random generator
* Change the --with-statgcc configure option to --with-static-libgcc and modified that option to work with linux as well as AIX
* Cleaned up various constants for consistancy
* Changed some function names for consistancy
* Added code to read KAD (Key Descriptors) and display them if found
* Generating a key with -g now asks for a key description as well (optional)
* Setting encryption without the -k option will now ask for a key description as well (optional)
* Sense data is now checked and outputted if the device does not accept the command
* added the 'mixed' encryption mode
* added the 'rawread' encryption mode
* changed the -u flag to --protect to avoid confusion and correct a mistake
* added the --ckod flag to instruct the drive to clear its key when the volume is dismounted
* The program now chmods /var/log/stenc to 600 to prevent unauthorized users from getting key change history
* Algorithm is no longer put into /var/log/stenc. Security related.
* Key checksums are now overriden by the key descriptor in /var/log/stenc. Security related.
2012-02-16 John Coleman <[email protected]>
* Version upgraded to 1.0.3
* Program now validates key input properly
* Key checksums work much better
* Program now displays key size, key checksum, and whether or not it is padding a key when it is entered.
* Manual entry has been updated
2012-02-15 John Coleman <[email protected]>
* Version upgraded to 1.0.2
* Created 'man' entry for stenc and updated help file to reference manual
* Key Instance Counter is now stamped into the log file when turning off encryption
* Key Instance Counter is now displayed in the device status even when it is not encrypting
2012-02-15 Sam Martinez <[email protected]>
* Version upgraded to 1.0.1
* Added random key generator
2012-02-14 John Coleman <[email protected]>
* Version upgraded to 1.0.0
* Removed most C code and replaced with C++ code
* Simplified all command line arguments
* Added a key change audit log file (/var/log/stenc)
* Removed the ability to enter a key as part of the command (security related)
* Key entry is now hidden from stdout and is verified for accuracy
* Added the ability to use file for a key using the -k option
* Program now exits if you aren't root
* added the --with-statgcc configure option to link static libgcc libraries
2010-09-03 John Coleman <[email protected]>
* Program now prompts if you turn encryption completely off
* Added -f option to suppress prompting
* Program now displays proper ioctl errors (i.e. I/O, permission, etc.)
* Device vendor, product ID, and product revision are now displayed with each request
* Errors now properly display whether or not the device accepted the command
2010-09-02 John Coleman <[email protected]>
* Initial Release
* Added basic support for AIX 5.3, error codes still not outputted