** Package changed: linux (Ubuntu) => opencryptoki (Ubuntu)
** Also affects: ubuntu-z-systems
Importance: Undecided
Status: New
** Changed in: ubuntu-z-systems
Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team)
** Changed in: opencryptoki (Ubuntu)
Importance: Undecided => Medium
** Changed in: ubuntu-z-systems
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2018908
Title:
[UBUNTU 23.04] opencryptoki 3.20.0: strength.conf has wrong mode
Status in Ubuntu on IBM z Systems:
New
Status in opencryptoki package in Ubuntu:
New
Bug description:
After installing opencryptoki 3.20.0 on Ubuntu 23.04 the strength.conf
file that is installed into /etc/opencryptoki/ has a wrong mode.
After starting pkcsslotrd, command 'pkcsconf -t' shows
pkcsconf: Error initializing the PKCS11 library: 0x5 (CKR_GENERAL_ERROR)
and the syslog shows:
usr/lib/api/policy.c POLICY: Configuration file
/etc/opencryptoki/strength.conf has wrong permissions!
# ls -l /etc/opencryptoki/strength.conf
-rw-r--r-- 1 root pkcs11 866 Feb 13 09:10 /etc/opencryptoki/strength.conf
So it has a mode of 644, but it must have a mode of 640 ! This is
checked by the code, and opencryptoki is not usable if the mode is
wrong. The owner "root:pkcs11" is correct.
Circumvention: manually change the mode to 0640. After that 'pkcsconf
-t' works.
Note: This affects all architectures where opencryptoki is supported.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2018908/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
