What | Removed | Added |
---|---|---|
Assignee | sbrabec@suse.com | josef.moellers@suse.com |
Josef, It seems there are packages which are still missing the pam_keyinit module: sddm, xdm, enlightment... And before you ask, I don't know how to get an exhaustive list of the remaining packages ;) But if we miss one package and the session keyring stuff in systemd is enabled (which is not the case currently) we may end up with a security issue like the one described in boo#1045886 comment #20 :-/ And given that how pam_keyinit is added in each package, I don't see how we can be certain that we won't miss one.