[Bug 972787] New: [gpg-agent] Rework agent startup for DM sessions.
http://bugzilla.opensuse.org/show_bug.cgi?id=972787 Bug ID: 972787 Summary: [gpg-agent] Rework agent startup for DM sessions. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE 42.1 Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: eich@suse.com QA Contact: qa-bugs@suse.de CC: astieger@suse.com, meissner@suse.com, premysl.janouch@suse.com, werner@suse.com, xorg-maintainer-bugs@forge.provo.novell.com Found By: Development Blocker: --- The gpg-agent for a user session is started by the script /etc/X11/xdm/sys.xsession. An openSUSE user pointed out to me that the socket handling of the gpg-agent has changed with gpg 2.1 - now neither a env file is written (the option --write-env-file is ignored) nor nor does anything use the env variable GPG_AGENT_INFO. Instead today a standard socket is used in $HOME/.gnupg/S.gpg-agent. Also check: https://gnupg.org/faq/whats-new-in-2.1.html If NFS mounted homes are desired, it can be handled as described in: https://wiki.gnupg.org/NFS This requires reworking of the gpg-agent startup (and possibly also of the ssh-agent) in sys.xsession. Any takers? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=972787 Arun Persaud <arun@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |arun@gmx.de -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=972787 Egbert Eich <eich@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|980521 | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=972787 http://bugzilla.opensuse.org/show_bug.cgi?id=972787#c20 --- Comment #20 from Jan Chren <dev.rindeal+opensuse@gmail.com> --- `session-scriptlets.HOWTO` states: ``` Scriptlets should be delivered with packages containing the services they start. They should not be shipped with xdm. ``` `rpm -ql xdm` shows: ``` /etc/X11/xdm/scripts/10-gpg-agent /etc/X11/xdm/scripts/11-ssh-agent /etc/X11/xdm/scripts/20-dbus /etc/X11/xdm/scripts/30-console-kit ``` Also, 'gpg-agent' is started by default and there's no documentation on how to disable it (ie. writing a "master scriptlet", which sets `usegpg` variable to string `no`). -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=972787 Bj�rn Voigt <bjoernv@arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bjoernv@arcor.de OS|openSUSE 42.1 |All -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply@novell.com
-
bugzilla_noreply@suse.com