Bug 40775

Summary:	Prevent loading of modules from different architecture
Product:	p11-glue	Reporter:	Stef Walter <stefw>
Component:	p11-kit	Assignee:	Stef Walter <stefw>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	normal
Priority:	medium	CC:	kalevlember, stefw
Version:	unspecified	Keywords:	patch
Hardware:	Other
OS:	All
URL:	http://cgit.collabora.com/git/user/stefw/p11-kit.git/log/?h=module-arch
Whiteboard:
i915 platform:		i915 features:

Description Stef Walter 2011-09-11 02:02:27 UTC

When packaging on Fedora, Kalev Lember brought up the issue that there's not really a way to limit p11-kit to only load modules for a given architecture.

When both 64-bit and 32-bit versions of a PKCS#11 library are installed then 64-bit processes should only load 64-bit modules, and vice versa.

Comment 1 Stef Walter 2011-09-11 02:08:49 UTC

Patch which allows limiting loading of modules based on architecture.
    
 * Adds new arch: configuration line to module config
 * If arch: config is present and the architecture of p11-kit does not
   match then the module is skipped.
    
http://cgit.collabora.com/git/user/stefw/p11-kit.git/log/?h=module-arch

Comment 2 Stef Walter 2011-09-14 07:10:39 UTC

Kalev proposed a different solution on the mailing list, which I've merged. I won't me merging this, unless a different *real* use case comes up at some point.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.