Merge branch 'github-pull-53'

Feature provides support to securely overwrite and remove LUKS-encrypted
partitions, making data unrecoverable.

* github-pull-53:
  New feature: luks-nuker -- shredder for encrypted partitions.

Link: #53
Signed-off-by: Alexey Gladkov <gladkov.alexey@gmail.com>

Author: legionus

features/dialog/data/bin/dialog-sh-functions

@@ -1,6 +1,10 @@
 #!/bin/bash
 # SPDX-License-Identifier: GPL-3.0-or-later
 
+. shell-source
+
+source_if_exists /etc/sysconfig/luks-nuker
+
 if [ -z "${__dialog_sh_functions-}" ]; then
 __dialog_sh_functions=1
 
@@ -103,6 +107,8 @@ dialog_ask_pass()
 	{
 		printf '#!/bin/bash\n'
 		printf 'exec '
+		! type -P luks-nuker >/dev/null ||
+			printf 'luks-nuker %b | ' "${LUKS_NUKER_ARGS-} --redirect"
 		printf ' %q' "$@"
 	} > "$cmdwrapper"
 	chmod +x "$cmdwrapper"

features/luks-nuker/README.md

@@ -0,0 +1,22 @@
+# Feature: luks-nuker
+
+Feature provides support for emergency destruction of encrypted partitions.
+
+## About
+
+The luks-nuker precedes cryptsetup's input, read it and tries to match it
+with the nuking password. Under normal circumstances it doesn't reveal
+itself at all.
+
+Refer to the `/etc/luks-nuker.conf` to get more information about and
+configure it.
+
+## How to get
+
+You can get luks-nuker from [git
+repository](http://git.altlinux.org/people/ved/public/luks-nuker.git).
+Also it is distributed by ALT Linux Sisyphus.
+
+## Parameters
+
+- **LUKS_NUKER_ARGS** -- Specifies luks-nuker arguments. Empty by default.

features/luks-nuker/config.mk

@@ -0,0 +1,10 @@
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+$(call feature-requires, luks, dialog)
+
+LUKS_NUKER_CONF ?= $(SYSCONFDIR)/luks-nuker.conf
+
+LUKS_NUKER_PROGS = luks-nuker
+LUKS_NUKER_FILES = $(LUKS_NUKER_CONF)
+
+LUKS_NUKER_ARGS ?=

features/luks-nuker/rules.mk

@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+PUT_FEATURE_FILES += $(LUKS_NUKER_FILES)
+PUT_FEATURE_PROGS += $(LUKS_NUKER_PROGS)
+
+$(call set-sysconfig,luks-nuker,LUKS_NUKER_ARGS,$(LUKS_NUKER_ARGS))