summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/request-key-helper.patch
diff options
context:
space:
mode:
authorKai Wohlfahrt <kai.wohlfahrt@gmail.com>2019-11-27 14:39:38 +0000
committerKai Wohlfahrt <kai.wohlfahrt@gmail.com>2019-12-12 12:23:30 +0000
commitea55a2d8a9eb030b58a494c13d1fcf6e5e71e625 (patch)
tree690949feb5ff1ebdfa18894fb8a8ea7538ec14ed /pkgs/os-specific/linux/kernel/request-key-helper.patch
parent7b8388302d00a34b6eb0ec9aaacffe96df49a01e (diff)
downloadnixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar.gz
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar.bz2
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar.lz
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar.xz
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.tar.zst
nixpkgs-ea55a2d8a9eb030b58a494c13d1fcf6e5e71e625.zip
linux: patch request-key binary path
This is necessary for id mapping to work with NFS + Kerberos, and also
touches #68106 and 634638.
Diffstat (limited to 'pkgs/os-specific/linux/kernel/request-key-helper.patch')
-rw-r--r--pkgs/os-specific/linux/kernel/request-key-helper.patch13
1 files changed, 13 insertions, 0 deletions
diff --git a/pkgs/os-specific/linux/kernel/request-key-helper.patch b/pkgs/os-specific/linux/kernel/request-key-helper.patch
new file mode 100644
index 00000000000..8264e265aed
--- /dev/null
+++ b/pkgs/os-specific/linux/kernel/request-key-helper.patch
@@ -0,0 +1,13 @@
+diff --git a/security/keys/request_key.c b/security/keys/request_key.c
+index 957b9e3e1492..5436a0d8b81d 100644
+--- a/security/keys/request_key.c
++++ b/security/keys/request_key.c
+@@ -114,7 +114,7 @@ static int call_usermodehelper_keys(const char *path, char **argv, char **envp,
+  */
+ static int call_sbin_request_key(struct key *authkey, void *aux)
+ {
+-	static char const request_key[] = "/sbin/request-key";
++	static char const request_key[] = "/run/current-system/sw/bin/request-key";
+ 	struct request_key_auth *rka = get_request_key_auth(authkey);
+ 	const struct cred *cred = current_cred();
+ 	key_serial_t prkey, sskey;