Pedro Monreal Gonzalez
c957356fce
* gpg: The support for composite Kyber+ECC public key algorithms
does now use the final FIPS-203 and LibrePGP specifications. The
experimental keys from 2.5.0 are no longer supported. [T6815]
* gpg: New commands --add-recipients and --change-recipients. [T1825]
* gpg: New option --proc-all-sigs. [T7261]
* gpg: Fix a regression in 2.5.0 in gpgme's tests. [T7195]
* gpg: Make --no-literal work again for -c and --store. [T5852]
* gpg: Improve detection of input data read errors. [T6528]
* gpg: Fix getting key by IPGP record (rfc-4398). [T7288]
* gpgsm: New option --assert-signer. [T7286]
* gpgsm: More improvements to PKCS#12 parsing to cope with latest
IVBB changes. [T7213]
* agent: Fix KEYTOCARD command when used with a loopback pinentry. [T7283]
* gpg-mail-tube: Make sure GNUPGHOME is set in vsd mode. New option
--as-attach. [rG4511997e9e1b]
* Now uses the process spawn API from libgpg-error. [T7192,T7194]
* Removed the --enable-gpg-is-gpg2 configure time option.
[rG2125f228d36c]
* Rebase patches:
- gnupg-add_legacy_FIPS_mode_option.patch
- gnupg-revert-rfc4880bis.patch
- gnupg-nobetasuffix.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=306
36 lines
1.4 KiB
Diff
36 lines
1.4 KiB
Diff
gpg-agent is in the chain of commands in xinitrc.
|
|
It receives a list of commands via argv[] which it is supposed to launch via exec.
|
|
In this mode all what matters is a bunch of setenv() of gpg related variables.
|
|
At no point it must fiddle with ulimit that was provided by its callers.
|
|
In case of xinitrc it was most likely pam_limits which, for example, configured the coredump settings for this session.
|
|
|
|
Every code path before the fork() call does no sensitive things, so coredumps do not matter.
|
|
|
|
gpg-agent does fork a child in this mode.
|
|
That child has the liberty to tweak ulimit in every way it wants.
|
|
This is what this patch does.
|
|
|
|
Without this patch, all applications launched after gpg-agent are unable to coredump, because systemd-coredump check the ulimit of the crashed process.
|
|
As a result, crashes of desktop applications can not be debugged.
|
|
|
|
References: bsc#1124847
|
|
|
|
--- a/agent/gpg-agent.c
|
|
+++ b/agent/gpg-agent.c
|
|
@@ -1049,7 +1049,6 @@ main (int argc, char **argv )
|
|
gcry_control (GCRYCTL_USE_SECURE_RNDPOOL);
|
|
gcry_set_progress_handler (agent_libgcrypt_progress_cb, NULL);
|
|
|
|
- disable_core_dumps ();
|
|
|
|
/* Set default options. */
|
|
parse_rereadable_options (NULL, 0); /* Reset them to default values. */
|
|
@@ -1738,6 +1737,7 @@ main (int argc, char **argv )
|
|
/*
|
|
This is the child
|
|
*/
|
|
+ disable_core_dumps ();
|
|
|
|
initialize_modules ();
|
|
|