Bug 1470222

Summary: [RFE] persistent hardware drivers in pesign database
Product: [Fedora] Fedora Reporter: Pat Riehecky <riehecky>
Component: pesignAssignee: Peter Jones <pjones>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: misterbonnie, pjones
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Patch to resolve none

Description Pat Riehecky 2017-07-12 14:30:12 UTC
Created attachment 1297028 [details]
Patch to resolve

Description of problem:
Today the pesign rpm replaces /etc/pki/pesign when it is installed.  As a result, updates to pesign remove any manually added drivers for hardware tokens.

This results in removal of user configured behavior.

The attached patch adds two simple packages which will emulate persistent hardware drivers for pesign without removing the ability to provide a new /etc/pki/pesign with the official packge

Version-Release number of selected component (if applicable):pesign-0.112-7


How reproducible:100%


Steps to Reproduce:
1. downgrade pesign
2. manually insert coolkey or opensc into /etc/pki/pesign
3. update pesign
4. note removal of drivers from /etc/pki/pesign

Actual results:
User added modules are remove

Expected results:
Method for retaining hardware drivers in database.

Additional info:
Attached patch resolves for coolkey and/or opensc