[systemd-devel] keyrings and dbus

Josef Moellers jmoellers at suse.de
Tue Jun 11 10:07:51 UTC 2019


Hi,

We have seen this problem: when you open a gnome-terminal, then the
shell in that terminal will not have the same keyring (created by
pam_keyinit.so) as the one eg in an xterm. This is due to the fact that
the xterm ist started by the standard fork/exec mechanism which passes
the keyring down to the children and the gnome-teminal (actually
gnome-terminal-server) is started by sending a dbus message to some
instance which the starts the terminal process.

AAMOF the gnome-terminal does not even have a keyring, so if one asks
for it ("keyctl show @s"), it is created on the fly. This causes the
kernel to create a keyring as a "user session keyring" while the GNOME
session (and thus the xterm) has a "session keyring".

Has anyone seen this and/or, most important question, does anyone have
an idea how to solve this?

I know that, strictly speaking, this is not a systemd question, but
we're trying to probe many sources to see if anyone has a solution.

Josef

-- 
SUSE Linux GmbH
Maxfeldstrasse 5
90409 Nuernberg
Germany
GF: Felix Imendörffer, Mary Higgins, Sri Rasiah
HRB 21284 (AG Nürnberg)




More information about the systemd-devel mailing list