diff options
author | Lennart Poettering <lennart@poettering.net> | 2024-02-19 17:30:56 +0100 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2024-02-20 16:50:00 +0100 |
commit | 251c71b62bb2f43dd6815c9a99e2d059a0ce2aef (patch) | |
tree | 3d33bba9fb29f1e2a7b13a240674025c8d7eb5a1 /src/cryptenroll | |
parent | pcrlock: normalize credential name for TPM2 PIN (diff) | |
download | systemd-251c71b62bb2f43dd6815c9a99e2d059a0ce2aef.tar.xz systemd-251c71b62bb2f43dd6815c9a99e2d059a0ce2aef.zip |
libfido2: tweak credential to read fido2 PIN from
Querying a fido2 PIN via askpw for enrolling is currently used in two
places: cryptenroll and homectl. So far we sloppily used the same fixed
credential name "fido2-pin" in both cases. Let's tweak that and make the
credential name match the other credentials cryptenroll or home query,
i.e. using the cryptenroll.* and home.* namespaces.
This is particular done in light of #31370, which wants to make the
credential name public. We really should get the name in order before
making it public.
Diffstat (limited to 'src/cryptenroll')
-rw-r--r-- | src/cryptenroll/cryptenroll-fido2.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/cryptenroll/cryptenroll-fido2.c b/src/cryptenroll/cryptenroll-fido2.c index 2baeb92e07..7e35dca9c5 100644 --- a/src/cryptenroll/cryptenroll-fido2.c +++ b/src/cryptenroll/cryptenroll-fido2.c @@ -97,6 +97,7 @@ int enroll_fido2( /* user_display_name= */ node, /* user_icon_name= */ NULL, /* askpw_icon_name= */ "drive-harddisk", + /* askpw_credential= */ "cryptenroll.fido2-pin", lock_with, cred_alg, &cid, &cid_size, |