Ok, let's start with the key utils preliminarties ...
... this crap from RPM4 needs to go away soonestly.

This code needs to be disappeared and replaced to use keyutils afaict:

 +sub getpasswdfile {
 +    my ($self) = @_;
 +    $self->{password_file} or return 1;
 +    open(my $hpass, "<", $self->{password_file}) or return 0;
 +    $self->{passphrase} = <$hpass>;
 +    chomp($self->{passphrase});
 +    close($hpass);
 +    1;
 +}

See rpmio/rpmku.c for the replacement.

The implementation with keyutils is rather subtle.

If --with-keyutils is in AutoFu, what is returned from rpmku*
is the name ("rpm:passwd") of the keyutils item rather than the
password string.

The benefit of keyutils is that the password is NOT resident
in RPM's address space except when absolutely necessary.

The additional benefit is that the password access and duration
is handled by keyutils, not RPM (and rpm-perl methods).

Read up on keyutils, the best source of how to use is
the README in the source code.

hth

73 de Jeff
______________________________________________________________________
RPM Package Manager                                    http://rpm5.org
Developer Communication List                        rpm-devel@rpm5.org

Reply via email to