On Thu, Jan 14, 2016 at 12:48:32PM -0300, Cristian Rodríguez wrote:
On Thu, Jan 14, 2016 at 11:23 AM, Lars Müller
wrote: Therefore on the YaST level I would simply add a check if CONFIG_PERSISTENT_KEYRINGS=y and then make use of the keyring and otherwise our old FILE base approach.
No Lars, that's going to break more sooner than later. the naming of kernel config options are not part of any ABI/API promise and change pretty frequently..
Do they really? If there is no reliable way to ckeck if the keyring feature is available, then we'll do it much simpler and enable it depending on the openSUSE code stream/ version. This would only cause a very small potential issue to those users running newer kernels on older releases. Cheers, Lars -- Lars Müller [ˈlaː(r)z ˈmʏlɐ] Samba Team + SUSE Labs SUSE Linux, Maxfeldstraße 5, 90409 Nürnberg, Germany