security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00
Code Activity

Stronger deprecate the --supervised option.

Browse source 
* agent/gpg-agent.c (opts): Rename option supervised.
* dirmngr/dirmngr.c (opts): Ditto.
--

The --supervised way to start gpg-agent has been deprecated for 2.5
years and will probably entirely removed with version 2.6.0.  To allow
its use until its removal the systemd service description need to be
adjusted to use this option.  The reason for the deprecation are
conflicts with the way systemd starts gpg-agent and gpg expects how
gpg-agent is started.  In particular gpg expects that the gpg-agent
matching its own version is started.  Further the systemd way is not
portable to other platforms and long term experience on Windows has
show that the standard way of starting gpg-agent is less error prone.

Note to those who want to re-introduse this option: Pretty please do
not use socket names conflicting with our standard socket names.  For
example use /run/user/1000/foo-gnupg/S.gpg-agent.
This commit is contained in:
Werner Koch 2025-01-08 17:10:07 +01:00
parent faa2d3a2e7
commit a019a0fcd8
No known key found for this signature in database
GPG key ID: E3FDFF218E45B72B
4 changed files with 21 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

6
doc/dirmngr.texi
View file

@ -86,11 +86,13 @@ This is the way @command{dirmngr} is started on demand by the other
GnuPG components. To force starting @command{dirmngr} it is in
general best to use @code{gpgconf --launch dirmngr}.
@item --supervised
@item --deprecated-supervised
@opindex supervised
Run in the foreground, sending logs to stderr, and listening on file
descriptor 3, which must already be bound to a listening socket. This
option is deprecated and not supported on Windows.
option is not supported on Windows and deprecated since version 2.3.6.
To clarify its deprecation the option has been renamed with version
2.5.3.
@item --list-crls
@opindex list-crls

12
doc/gpg-agent.texi
View file

@ -167,21 +167,17 @@ gpg-agent: @code{gpg-agent --daemon /bin/sh}. This way you get a new
shell with the environment setup properly; after you exit from this
shell, gpg-agent terminates within a few seconds.
@item --supervised
@item --deprecated-supervised
@opindex supervised
Run in the foreground, sending logs by default to stderr, and
listening on provided file descriptors, which must already be bound to
listening sockets. This option is deprecated and not supported on
Windows.
listening sockets. This option is not supported on Windows and
deprecated since version 2.3.6. To clarify its deprecation the option
has been renamed with version 2.5.3.
If in @file{common.conf} the option @option{no-autostart} is set, any
start attempts will be ignored.
In @option{--supervised} mode, different file descriptors can be provided for
use as different socket types (e.g., ssh, extra) as long as they are
identified in the environment variable @code{LISTEN_FDNAMES} (see
sd_listen_fds(3) on some Linux distributions for more information on
this convention).
@end table
@mansect options