Should udev rules `killall -9 scdaemon` for NEO?

[yubico]

Should udev rules `killall -9 scdaemon` for NEO?

[tfheen]

]] Andrew Bradford

The udev rules could do this for the user by simply adding RUN+="/usr/bin/killall -9 scdaemon". I'm not sure of the security implications of this. Are there any?

Would this be a worthwhile change? Or, because it only applies to NEO and not other Yubikeys, should the udev rule break out NEO and treat it differently?

I've tested the following udev rule on Arch Linux and it works, fixing the need to manually run killall -9 scdaemon:

We should not do this. The pcscd folks should just fix scdaemon.

Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are

[bradfa]

@tfheen, OK. I'll close this, then. Thanks!

[daurnimator]

Where is the issue being tracked with pcscd upstream?

[gdetrez]

@daurnimator There is a (new) gnupg issue here