Bug 40775 - Prevent loading of modules from different architecture
Summary: Prevent loading of modules from different architecture
Status: RESOLVED WONTFIX
Alias: None
Product: p11-glue
Classification: Unclassified
Component: p11-kit (show other bugs)
Version: unspecified
Hardware: Other All
: medium normal
Assignee: Stef Walter
QA Contact:
URL: http://cgit.collabora.com/git/user/st...
Whiteboard:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2011-09-11 02:02 UTC by Stef Walter
Modified: 2011-09-14 07:10 UTC (History)
2 users (show)

See Also:
i915 platform:
i915 features:


Attachments

Description Stef Walter 2011-09-11 02:02:27 UTC
When packaging on Fedora, Kalev Lember brought up the issue that there's not really a way to limit p11-kit to only load modules for a given architecture.

When both 64-bit and 32-bit versions of a PKCS#11 library are installed then 64-bit processes should only load 64-bit modules, and vice versa.
Comment 1 Stef Walter 2011-09-11 02:08:49 UTC
Patch which allows limiting loading of modules based on architecture.
    
 * Adds new arch: configuration line to module config
 * If arch: config is present and the architecture of p11-kit does not
   match then the module is skipped.
    
http://cgit.collabora.com/git/user/stefw/p11-kit.git/log/?h=module-arch
Comment 2 Stef Walter 2011-09-14 07:10:39 UTC
Kalev proposed a different solution on the mailing list, which I've merged. I won't me merging this, unless a different *real* use case comes up at some point.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.