If the keystore process uses sockets (SKS uses Web Services over sockets),
you could achieve trusted path detection in Linux without any
significant programming at all:
http://welz.org.za/notes/on-peer-cred.html
This scheme is for example used by PostgreSQL for their "ident"
authentication scheme
On Monday, October 10 at 12:43PM, Anders Rundgren wrote:
>
> On 2011-10-10 12:05, Martin Paljak wrote:
> > Hello,
> >
> > On Mon, Oct 10, 2011 at 12:27, Anders Rundgren
> > wrote:
> >> Is there any support for trusted (OS-level) PIN input in OpenSC?
>
> > Trusted path for me means guaranteed by
On 2011-10-10 12:05, Martin Paljak wrote:
> Hello,
>
> On Mon, Oct 10, 2011 at 12:27, Anders Rundgren
> wrote:
>> Is there any support for trusted (OS-level) PIN input in OpenSC?
> Trusted path for me means guaranteed by tamper-proof mechanisms, which
> usually means separate hardware-guaranteed
Hello,
On Mon, Oct 10, 2011 at 12:27, Anders Rundgren
wrote:
> Is there any support for trusted (OS-level) PIN input in OpenSC?
Trusted path for me means guaranteed by tamper-proof mechanisms, which
usually means separate hardware-guaranteed channel, which in turn
would mean something like TPC, w