[Bug runtime/26665] New: secureboot stap-server matching breaks if non-stap MOK is already enrolled

[fche at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26665

            Bug ID: 26665
           Summary: secureboot stap-server matching breaks if non-stap MOK
                    is already enrolled
           Product: systemtap
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: runtime
          Assignee: systemtap at sourceware dot org
          Reporter: fche at redhat dot com
  Target Milestone: ---

nss_get_or_keep_compatible_server_info() filters out stap servers that lack mok
keys that the client knows of, on the assumption that the only mok keys in the
system could be systemtap ones.  But that's not the case.  We need to exclude
local mok's that are systemtap-unrelated.  And in the case where there is no
matching server (say, an old stap-server ran that generated our mok, but is now
dead), we need to give users recovery instructions (drop the local mok and/or
try another server).

-- 
You are receiving this mail because:
You are the assignee for the bug.