Comments (2)
Yeah, I regularly forget about xdg.
Well, we should still have $HOME
as a fallback. XDG_CONFIG_HOME
is not set on all systems. But that's what the spec says anyway.
from pam_e4crypt.
Turns out it isn't that simple. we (usually) are part of the process setting up the session. At the point the module is invoked, the user environment may not be setup. That's one the reasons why we don't query the HOME
variable but look up the home directory through libpam
, by the way.
In my use case, for example, the module is invoked very early in the login process. Sourcing the bash profile and setting environment variables like XDG_CONFIG_HOME
, on the other hand, is pretty much the last thing in that process.
The even bigger issue is that the salts are loaded during authentication and not during session-setup. We do this because the password entered by the user is not available during session setup by default. (I decided to rather have the encryption keys shipped from one phase to the other than a user password in clear text.)
So while you brought up a very good point, this is pretty much a "won't fix". Sorry for that.
from pam_e4crypt.
Related Issues (20)
- Keys not flushed from cache after logout HOT 1
- [Idea] Add an option for system-wide user specific salt HOT 6
- systemd --user instance doesn't inherit user's session keyring HOT 6
- [info] fscrypt by google HOT 1
- Implement password management function HOT 5
- Packaged for distros HOT 1
- Add ext2fs package to cmake dependencies
- Userspace usage HOT 1
- Salt handling does not match `e4crypt add_key` HOT 1
- PAM failed: Cannot make/remove an entry for the specified session HOT 3
- Make a man page
- nice work HOT 1
- Mention cron problems in documentation HOT 1
- Is the 16-byte salt length required ? HOT 2
- Re-introduce support for EXT4_IOC_GET_ENCRYPTION_PWSALT and iterating over mtab HOT 3
- Failure to transport keys from auth to session stage with pam-1.4.0
- sshd support HOT 6
- Changing LIBDIR to /usr/lib HOT 2
- pam_e4crypt: Failed to retrieve key list! HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pam_e4crypt.