p11-kit error on unreadable /etc/pkcs11/pkcs11.conf

Andreas Metzler ametzler at bebt.de
Fri Apr 21 17:47:04 UTC 2017


Hello,

this was reported in http://bugs.debian.org/860903 by Marga Manterola.
p11-kit fails on unreadable /etc/pkcs11/pkcs11.conf while no error is
generated when the file simply does not exist. Is there a very good
reason for this? It would be easily fixable:

p11-kit/conf.c
- config = _p11_conf_parse_file (system_conf, NULL, CONF_IGNORE_MISSING);
+ config = _p11_conf_parse_file (system_conf, NULL, CONF_IGNORE_MISSING | CONF_IGNORE_ACCESS_DENIED);

In the bugreport Marga describes her setup and why
/etc/pkcs11/pkcs11.conf is unreadable in the bugreport, but the whole
issue boil down to the question above.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'


More information about the p11-glue mailing list