Support for long running kcheckpass supporting multiple authentications
Summary: So far kcheckpass allowed to try to verify one password. This required kscreenlocker_greet to exec for every new entered password. Due to that we cannot enable seccomp in kscreenlocker_greet. This change prepares for supporting seccomp by making it possible to have a long living kcheckpass with multiple authentications. For that the interaction is changed: * kcheckpass gets started without going into Authenticate directly * kcheckpass uses a signalfd for waiting on sigusr1 and sigusr2 * kcheckpass goes into a loop for authentication ** signals parent process through socket that it is ready for auth ** waits for signal ** on sigusr1 starts to authenticate ** on sigusr2 goes out of loop ** after authenticate goes into next loop run to continue For the authenticator in kscreenlocker_greet the main change is to send the signal to kcheckpass when it wants to authenticate. In addition the authenticator supports both a delayed an...
parent
d666fe87
Please register or sign in to comment