Re: gnome-keyring PKCS#11 config file /etc/xdg/pkcs11.conf[.defaults]

[Stef Walter <stefw collabora co uk>]

On 2010-12-22 14:42, Dan Winship wrote:
> For GNOME, I was assuming that this information would be stored in
> gsettings/dconf. (This is
> https://bugzilla.gnome.org/show_bug.cgi?id=543455, although the bug was
> originally something slightly different, and I hijacked it a bit as of
> comment 8.)
> 
> Then we just rely on dconf defaults/lockdown stuff to make it so the
> distro/admin can set things up as desired and the user can't override it
> without root authorization.

True, we could use gsettings/dconf for the current GNOME implementation.
Sounds like a good plan. I guess we'd need to figure out where to
install the schema from since it's used by multiple projects.

But on the long term, Nikos (and I to some extend) has been working on
proposing some standards for having crypto libraries (and other
components) share configuration for PKCS#11 configuration. When this
stabilizes, we'd probably want to support that (whether in addition
GNOME's own configs, or in replacement of them).

Cheers,

Stef