* [Bug runtime/26665] New: secureboot stap-server matching breaks if non-stap MOK is already enrolled
@ 2020-09-25 16:00 fche at redhat dot com
2020-09-30 14:11 ` [Bug runtime/26665] " fche at redhat dot com
2020-11-10 1:39 ` fche at redhat dot com
0 siblings, 2 replies; 3+ messages in thread
From: fche at redhat dot com @ 2020-09-25 16:00 UTC (permalink / raw)
To: systemtap
https://sourceware.org/bugzilla/show_bug.cgi?id=26665
Bug ID: 26665
Summary: secureboot stap-server matching breaks if non-stap MOK
is already enrolled
Product: systemtap
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: runtime
Assignee: systemtap at sourceware dot org
Reporter: fche at redhat dot com
Target Milestone: ---
nss_get_or_keep_compatible_server_info() filters out stap servers that lack mok
keys that the client knows of, on the assumption that the only mok keys in the
system could be systemtap ones. But that's not the case. We need to exclude
local mok's that are systemtap-unrelated. And in the case where there is no
matching server (say, an old stap-server ran that generated our mok, but is now
dead), we need to give users recovery instructions (drop the local mok and/or
try another server).
--
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug runtime/26665] secureboot stap-server matching breaks if non-stap MOK is already enrolled
2020-09-25 16:00 [Bug runtime/26665] New: secureboot stap-server matching breaks if non-stap MOK is already enrolled fche at redhat dot com
@ 2020-09-30 14:11 ` fche at redhat dot com
2020-11-10 1:39 ` fche at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: fche at redhat dot com @ 2020-09-30 14:11 UTC (permalink / raw)
To: systemtap
https://sourceware.org/bugzilla/show_bug.cgi?id=26665
Frank Ch. Eigler <fche at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|NEW |RESOLVED
--- Comment #1 from Frank Ch. Eigler <fche at redhat dot com> ---
commit 3b02cd57f
--
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug runtime/26665] secureboot stap-server matching breaks if non-stap MOK is already enrolled
2020-09-25 16:00 [Bug runtime/26665] New: secureboot stap-server matching breaks if non-stap MOK is already enrolled fche at redhat dot com
2020-09-30 14:11 ` [Bug runtime/26665] " fche at redhat dot com
@ 2020-11-10 1:39 ` fche at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: fche at redhat dot com @ 2020-11-10 1:39 UTC (permalink / raw)
To: systemtap
https://sourceware.org/bugzilla/show_bug.cgi?id=26665
--- Comment #2 from Frank Ch. Eigler <fche at redhat dot com> ---
and commit 7615cae790c899bc
--
You are receiving this mail because:
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2020-11-10 1:39 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-25 16:00 [Bug runtime/26665] New: secureboot stap-server matching breaks if non-stap MOK is already enrolled fche at redhat dot com
2020-09-30 14:11 ` [Bug runtime/26665] " fche at redhat dot com
2020-11-10 1:39 ` fche at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).