Re: [systemd-devel] systemd-ask-password and kernel keyring

2018-11-14 Thread Ryan Gonzalez
What would a patch look like? A --user that instead saves it to the user's active secret service? -- Ryan (ライアン) Yoko Shimomura, ryo (supercell/EGOIST), Hiroyuki Sawano >> everyone else https://refi64.com/ On Wed, Nov 14, 2018, 9:44 AM Lennart Poettering On Mi, 14.11.18 11:38, Sietse van Zanen

Re: [systemd-devel] systemd-ask-password and kernel keyring

2018-11-14 Thread Lennart Poettering
On Mi, 14.11.18 11:38, Sietse van Zanen (sie...@wizdom.nu) wrote: > According to man: > >--keyname= >Configure a kernel keyring key name to use as cache for the > password. If set, then the tool will try to push any collected passwords into > the >kernel keyring

Re: [systemd-devel] Environment-variable security?

2018-11-14 Thread David Parsley
On Wed, Nov 14, 2018 at 3:43 AM Lennart Poettering wrote: > I mean, seriously, people do lots of stuff. It doesn't mean that all > what people do is actually a good idea or just safe. > Certainly agreed on this point. It is my belief, however, that system software, where possible, should

Re: [systemd-devel] systemd-devel Digest, Vol 103, Issue 11

2018-11-14 Thread Piotr Dobrogost
> Date: Thu, 8 Nov 2018 14:15:18 +0100 > From: Piotr Dobrogost > Message-ID: < caa6tfmuar3vnz3bap6fpdjbftutk3gdfkmch_cr7d+by1yj...@mail.gmail.com> > I enabled unified hierarchy by passing "systemd.unified_cgroup_hierarchy" > kernel parameter and stat reports "cgroups2fs" yet the limit still

[systemd-devel] systemd-ask-password and kernel keyring

2018-11-14 Thread Sietse van Zanen
According to man: --keyname= Configure a kernel keyring key name to use as cache for the password. If set, then the tool will try to push any collected passwords into the kernel keyring of the root user Why only for user root and not the user running

Re: [systemd-devel] How to debug occasional hashmap corruption?

2018-11-14 Thread juice
juice kirjoitti 2018-11-06 14:30: Lennart Poettering kirjoitti 2018-11-06 12:27: On Di, 06.11.18 11:57, juice (ju...@swagman.org) wrote: Hi, During the past half year I have seen systemd dump core three times due to what I suspect a hashmap corruption or race. Each time it looks a bit

Re: [systemd-devel] Environment-variable security?

2018-11-14 Thread Lennart Poettering
On Mi, 14.11.18 02:17, Marek Howard (marek...@gmail.com) wrote: > > It is not *that* common to pass secrets via environment variable but > > it's nothing unusual, and many programs offer this interface. OpenVPN > > comes to bind. Where such interface is offered, propagating down the > > process