Re: [systemd-devel] keyrings and dbus

2019-06-17 Thread Lennart Poettering
On Di, 11.06.19 12:07, Josef Moellers (jmoell...@suse.de) wrote: > Hi, > > We have seen this problem: when you open a gnome-terminal, then the > shell in that terminal will not have the same keyring (created by > pam_keyinit.so) as the one eg in an xterm. This is due to the fact that > the xterm i

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Topi Miettinen
On 13.6.2019 20.52, Simon McVittie wrote: On Thu, 13 Jun 2019 at 15:43:36 +0300, Topi Miettinen wrote: The sessions with slightly different scopes might be useful in some cases. But if this is not the case, would it be possible to unify the scopes and make systemd --user part of the login sessio

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Simon McVittie
On Thu, 13 Jun 2019 at 15:43:36 +0300, Topi Miettinen wrote: > The sessions with slightly different scopes might be useful in some cases. > But if this is not the case, would it be possible to unify the scopes and > make systemd --user part of the login session? I don't think so. Consider these tw

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Topi Miettinen
On 12.6.2019 22.20, Simon McVittie wrote: On Wed, 12 Jun 2019 at 19:57:39 +0300, Andrei Borzenkov wrote: 12.06.2019 19:18, Simon McVittie пишет: systemd user services are not part of a particular login session. They exist outside all login sessions (look at systemd-cgls). gnome-terminal surel

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Josef Moellers
On 13.06.19 12:18, Andrei Borzenkov wrote: > 13.06.2019 11:11, Josef Moellers пишет: >> On 12.06.19 17:34, Andrei Borzenkov wrote: > ... >>> >>> If I add pam_keyinit to systemd-user, I do get session keyring for gnome >>> terminal, but this is really wrong one: >>> >>> bor@10:~> cat /proc/keys >>>

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Andrei Borzenkov
13.06.2019 11:11, Josef Moellers пишет: > On 12.06.19 17:34, Andrei Borzenkov wrote: ... >> >> If I add pam_keyinit to systemd-user, I do get session keyring for gnome >> terminal, but this is really wrong one: >> >> bor@10:~> cat /proc/keys >> 2133e406 I--Q--- 2 perm 1f3f 1000 65534 keyri

Re: [systemd-devel] keyrings and dbus

2019-06-13 Thread Josef Moellers
On 12.06.19 17:34, Andrei Borzenkov wrote: > 11.06.2019 15:32, Josef Moellers пишет: >> On 11.06.19 13:27, Mantas Mikulėnas wrote: >>> On Tue, Jun 11, 2019 at 1:58 PM Josef Moellers > >>> The point is that in the gnome-terminal case, pam_keyinit.so is not >>> involved. >>> >>> >>> It is. T

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Simon McVittie
On Wed, 12 Jun 2019 at 19:57:39 +0300, Andrei Borzenkov wrote: > 12.06.2019 19:18, Simon McVittie пишет: > > systemd user services are not part of a particular login session. They > > exist outside all login sessions (look at systemd-cgls). > > > gnome-terminal surely *is* part of particular login

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Andrei Borzenkov
12.06.2019 19:18, Simon McVittie пишет: > On Wed, 12 Jun 2019 at 18:34:30 +0300, Andrei Borzenkov wrote: >> Technically this is probably correct - session keyring lifetime is >> exactly that - session, and systemd-user lifetime is independent of >> individual (GUI) login session lifetime. But then

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Simon McVittie
On Wed, 12 Jun 2019 at 18:34:30 +0300, Andrei Borzenkov wrote: > Technically this is probably correct - session keyring lifetime is > exactly that - session, and systemd-user lifetime is independent of > individual (GUI) login session lifetime. But then D-Bus should not be > started inside systemd-

Re: [systemd-devel] keyrings and dbus

2019-06-12 Thread Andrei Borzenkov
11.06.2019 15:32, Josef Moellers пишет: > On 11.06.19 13:27, Mantas Mikulėnas wrote: >> On Tue, Jun 11, 2019 at 1:58 PM Josef Moellers >> The point is that in the gnome-terminal case, pam_keyinit.so is not >> involved. >> >> >> It is. The systemd --user instance (from which dbus-daemon a

Re: [systemd-devel] keyrings and dbus

2019-06-11 Thread Josef Moellers
On 11.06.19 14:32, Josef Moellers wrote: > On 11.06.19 13:27, Mantas Mikulėnas wrote: >> On Tue, Jun 11, 2019 at 1:58 PM Josef Moellers >> The point is that in the gnome-terminal case, pam_keyinit.so is not >> involved. >> >> >> It is. The systemd --user instance (from which dbus-daemon

Re: [systemd-devel] keyrings and dbus

2019-06-11 Thread Josef Moellers
On 11.06.19 13:27, Mantas Mikulėnas wrote: > On Tue, Jun 11, 2019 at 1:58 PM Josef Moellers The point is that in the gnome-terminal case, pam_keyinit.so is not > involved. > > > It is. The systemd --user instance (from which dbus-daemon and > gnome-terminal-server descend) has its own P

Re: [systemd-devel] keyrings and dbus

2019-06-11 Thread Mantas Mikulėnas
On Tue, Jun 11, 2019 at 1:58 PM Josef Moellers wrote: > On 11.06.19 12:45, Mantas Mikulėnas wrote: > > On Tue, Jun 11, 2019 at 1:08 PM Josef Moellers > > wrote: > > > > Hi, > > > > We have seen this problem: when you open a gnome-terminal, then the > > shell

Re: [systemd-devel] keyrings and dbus

2019-06-11 Thread Josef Moellers
On 11.06.19 12:45, Mantas Mikulėnas wrote: > On Tue, Jun 11, 2019 at 1:08 PM Josef Moellers > wrote: > > Hi, > > We have seen this problem: when you open a gnome-terminal, then the > shell in that terminal will not have the same keyring (created by > pam

Re: [systemd-devel] keyrings and dbus

2019-06-11 Thread Mantas Mikulėnas
On Tue, Jun 11, 2019 at 1:08 PM Josef Moellers wrote: > Hi, > > We have seen this problem: when you open a gnome-terminal, then the > shell in that terminal will not have the same keyring (created by > pam_keyinit.so) as the one eg in an xterm. This is due to the fact that > the xterm ist started

[systemd-devel] keyrings and dbus

2019-06-11 Thread Josef Moellers
Hi, We have seen this problem: when you open a gnome-terminal, then the shell in that terminal will not have the same keyring (created by pam_keyinit.so) as the one eg in an xterm. This is due to the fact that the xterm ist started by the standard fork/exec mechanism which passes the keyring down