Skip to content

Move WB_AUTH into session keyring on Linux #55

Description

@noproto

Currently the console secret is an environment variable that is inherited by process children. On Linux, the kernel's key management facility can store the secret so it can not be read through procfs. On FreeBSD, Solaris, etc., this will remain the same. To implement this change, all -- currently 5 -- instances of WB_AUTH in the library and application (https://github.com/WhiteBeamSec/WhiteBeam/search?q=WB_AUTH) need to be updated to use a platform-specific function. On Linux, this is add_key and request_key.

https://man7.org/linux/man-pages/man2/add_key.2.html
https://man7.org/linux/man-pages/man2/request_key.2.html
https://man7.org/linux/man-pages/man7/session-keyring.7.html

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions