Bug 1470222 - [RFE] persistent hardware drivers in pesign database
[RFE] persistent hardware drivers in pesign database
Status: NEW
Product: Fedora
Classification: Fedora
Component: pesign (Show other bugs)
rawhide
All Linux
unspecified Severity low
: ---
: ---
Assigned To: Peter Jones
Fedora Extras Quality Assurance
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-07-12 10:30 EDT by Pat Riehecky
Modified: 2017-07-12 10:30 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
Patch to resolve (1.41 KB, patch)
2017-07-12 10:30 EDT, Pat Riehecky
no flags Details | Diff

  None (edit)
Description Pat Riehecky 2017-07-12 10:30:12 EDT
Created attachment 1297028 [details]
Patch to resolve

Description of problem:
Today the pesign rpm replaces /etc/pki/pesign when it is installed.  As a result, updates to pesign remove any manually added drivers for hardware tokens.

This results in removal of user configured behavior.

The attached patch adds two simple packages which will emulate persistent hardware drivers for pesign without removing the ability to provide a new /etc/pki/pesign with the official packge

Version-Release number of selected component (if applicable):pesign-0.112-7


How reproducible:100%


Steps to Reproduce:
1. downgrade pesign
2. manually insert coolkey or opensc into /etc/pki/pesign
3. update pesign
4. note removal of drivers from /etc/pki/pesign

Actual results:
User added modules are remove

Expected results:
Method for retaining hardware drivers in database.

Additional info:
Attached patch resolves for coolkey and/or opensc

Note You need to log in before you can comment on or make changes to this bug.