[Bug 1063983] New: pcscd's socket activation is not enabled anymore by default
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 Bug ID: 1063983 Summary: pcscd's socket activation is not enabled anymore by default Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: wolfgang@rosenauer.org QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- At some point in the 42.x series pcsc-lite was updated and a back then required workaround removed from the package because it was supposedly not required anymore. Unfortunately nobody added the service to the preset package in the same step and so socket activation is not enabled anymore by default on fresh 42.3 and Tumbleweed installations. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening@forge.pr |wolfgang@rosenauer.org |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 http://bugzilla.opensuse.org/show_bug.cgi?id=1063983#c1 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo? --- Comment #1 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- Proposed patch: https://build.opensuse.org/package/rdiff/home:wrosenauer:devel/systemd-presets-branding-openSUSE?opackage=systemd-presets-branding-openSUSE&oproject=Base%3ASystem&rev=3 Is this the correct way for TW? And would it be enough to apply the same for released 42.3? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com, | |sbrabec@suse.cz -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 http://bugzilla.opensuse.org/show_bug.cgi?id=1063983#c2 Stanislav Brabec <sbrabec@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sbrabec@suse.com, | |security-team@suse.de Flags|needinfo? |needinfo?(security-team@sus | |e.de) --- Comment #2 from Stanislav Brabec <sbrabec@suse.com> --- Yes, it is a correct approach. Adding security team, as they have to approve all daemons started by default. Then the same has to be done in SLE presets. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 http://bugzilla.opensuse.org/show_bug.cgi?id=1063983#c3 --- Comment #3 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- In any case just mentioning that pcsc-lite was already on by default by the workaround used in 42.1: %if 0%{?suse_version} > 1140 mkdir -p %{buildroot}%{_libexecdir}/systemd/system-preset echo -e 'enable pcscd.socket\nenable pcscd.service'
%{buildroot}%{_libexecdir}/systemd/system-preset/50-pcscd.preset %endif
While we are at it: While using socket activation is attractive it seems to cause issues with some readers. See bug 1063985. So as an additional request for comments is if we also could enable pcscd permanently? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1063983 http://bugzilla.opensuse.org/show_bug.cgi?id=1063983#c8 Wolfgang Rosenauer <wolfgang@rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(wolfgang@rosenaue | |r.org) | --- Comment #8 from Wolfgang Rosenauer <wolfgang@rosenauer.org> --- We build pcscd with polkit. For completeness my submitted proposal for the moment looks like this: - the latest pcsc-lite package submission removes the --auto-exit parameter from the start up so pcscd should not exit itself once it was activated - still the service is not enabled by default to keep it from running on most systems which do not use any smartcard reader at all - I submitted a new systemd preset to (re-)enable socket activation though If all are accepted into Factory I would like to apply the same changes to 42.3 so keeping this open for a bit longer. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com