On Fri 2020-03-06 09:09:11 +0100, Laurent Wafflard wrote:
> Yes it would be better !
> With the Q&D stderr redirect, some logs are not catched by the logcheck 
> rules of gpg-agent, we added locally:
>      ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: 
> Listening on GnuPG cryptographic agent and passphrase cache \(access for 
> web browsers\)\.$
>      ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd\[[[:digit:]]+\]: 
> Closed GnuPG cryptographic agent and passphrase cache \(access for web 
> browsers\)\.$

Please propose new logcheck patterns in a separate bug report, ideally
with a patch, or perhaps as a separate file!  your e-mail program
appears to line-wrap this stuff, and regexps aren't very useful if
they've been mangled.

> but it would become useless if gpgconf will be executed only for users 
> with existent home.

I don't want to predicate running gpgconf on whether the homedir exists,
because it's not clear to me that this is a specific requirement.

the canonical upstream way to query the gpg suite's configuration is
gpgconf, and i'm trying to use the canonical upstream interfaces rather
than crafting novel ones that i (or someone else) will then have to
maintain.

That said, i agree that the spurious warnings don't seem relevant.
Rather, the environment generator shouldn't try to claim that gpg-agent
should be the active ssh-agent socket if it knows that gpg-agent is
somehow broken.

So i've wrapped the test in question in a "gpgconf --check-programs"
command instead.  Please follow up here (feel free to reopen the bug
report) if this doesn't solve the problem for you.

Regards,

   --dkg

Attachment: signature.asc
Description: PGP signature

Reply via email to