Hi Howard, On Thu, Jan 14, 2016 at 11:45:28AM +0100, Howard Guo wrote: [ 8< ]
- YaST windows domain membership module The module generates configuration files for file-based ccache, could it generate configurations that use kernel keyring instead?
It should as the CONFIG_PERSISTENT_KEYRINGS=y is set since openSUSE 13.2 at the kernel config level. First I thought it would be nice to offer the opportunity to select between FILE, DIR, and KEYRING. But the latter is as you wrote the most secure and also most easy to handle approach. Therefore on the YaST level I would simply add a check if CONFIG_PERSISTENT_KEYRINGS=y and then make use of the keyring and otherwise our old FILE base approach. No extra questions and tweaking. All we do is to log that we found CONFIG_PERSISTENT_KEYRINGS=y and are making use of the keyring. Do we have a bug to track thic issue yet? I don't like to abuse 899118 Cheers, Lars -- Lars Müller [ˈlaː(r)z ˈmʏlɐ] Samba Team + SUSE Labs SUSE Linux, Maxfeldstraße 5, 90409 Nürnberg, Germany