[pkg-gnupg-maint] Beware of leftover gpg-agent processes

Werner Koch wk at gnupg.org
Sat Aug 6 08:30:28 UTC 2016


On Fri,  5 Aug 2016 20:54, dkg at fifthhorseman.net said:

> These .service files are launching the daemons with a similar invocation
> to what we have traditionally used in X11 startup scripts.  I don't see
> how this arrangement would be any more broken than those scripts were.

By making use-standard-socket the default in 2.1 I had hoped that we
could get away from starting gpg-agent in advance (on semi-in-advanced
by systemd watching the socket).  We have been doing this on Windows for
many years and it reduced questions and bug reports compared to starting
it as a system service.  So time to do this on Unix as well.

> The benefit, though, is that the processes will be supervised and
> cleanly terminated when the user finishes all their sessions -- and if a

I know that there is a disssession between the gray beards and the young
dudes.  I'll better shut up.

> That'd be great, thanks!  In addition, it would be great to be able to
> have ssh be able to tell gpg-agent where to do its prompting if it was
> started in a separate session (see https://bugs.debian.org/830658).  i'm

Good point.  I guess I need to drink some beer with the OpenSSH folks ;-)



Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
 /* Join us at OpenPGP.conf  <https://openpgp-conf.org> */




More information about the pkg-gnupg-maint mailing list