Hello Debian GNOME maintainers,

Update to my gnome-keyring 51.1 OpenSession source-level RFC,
following the earlier 60/61 result.

I reran the patched build and full Meson suite in a fresh Ubuntu 26.10
Docker container using an unprivileged user (UID nobody) with separate
HOME, XDG_RUNTIME_DIR and D-Bus session. This removes the root access
artifact in startup/control/noaccess.

Results:
- Official GNOME 51.1 source archive SHA256:
dfe7adc5876ef0670e7eba2907799bdbb8875ce58bb4208e1a52169bd16a47ca
- Two source changes applied in daemon/dbus/gkd-secret-session.c:
aes_negotiate() and plain_negotiate() now set G_DBUS_ERROR_FAILED if
the PKCS#11 client session is NULL before returning FALSE.
- Meson configuration: PASS
- ninja compilation: PASS
- meson test in dbus-run-session as non-root: 61/61 PASS, 0 failures
- Built test binary SHA256:
6a12ef960e8823b3465d4826751be074706f2131f87134bd00b8b4616939e115

This confirms compile and standard regression-suite compatibility, not
a direct deterministic reproduction of the concurrent OpenSession
missing-client race. The system's production keyring and stored
credentials were never touched. The container was ephemeral.

Please consider this evidence alongside the existing GNOME OpenSession
MR !112. I do not claim a new, independent fix without an upstream
comparison and direct race test.

Regards,
Alexander Stepanov

Reply via email to