Bug ID | 972787 |
---|---|
Summary | [gpg-agent] Rework agent startup for DM sessions. |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | All |
OS | openSUSE 42.1 |
Status | NEW |
Severity | Major |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | eich@suse.com |
QA Contact | qa-bugs@suse.de |
CC | astieger@suse.com, meissner@suse.com, premysl.janouch@suse.com, werner@suse.com, xorg-maintainer-bugs@forge.provo.novell.com |
Found By | Development |
Blocker | --- |
The gpg-agent for a user session is started by the script /etc/X11/xdm/sys.xsession. An openSUSE user pointed out to me that the socket handling of the gpg-agent has changed with gpg 2.1 - now neither a env file is written (the option --write-env-file is ignored) nor nor does anything use the env variable GPG_AGENT_INFO. Instead today a standard socket is used in $HOME/.gnupg/S.gpg-agent. Also check: https://gnupg.org/faq/whats-new-in-2.1.html If NFS mounted homes are desired, it can be handled as described in: https://wiki.gnupg.org/NFS This requires reworking of the gpg-agent startup (and possibly also of the ssh-agent) in sys.xsession. Any takers?