opencryptoki

mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-25 17:39:16 +03:00

Files

Ingo Franzki fe511af72f PKCSSLOTD/API/COMMON: Allow to configure a token user group

A new optional key value pair named 'usergroup' can be specified within a
slot structure to specify the user group name that is set as the owner of
the token directory. Only users that are members of this group have access
to the token and its objects. Users that are not a member of this group
will not see the token as being available (e.g. via 'pkcsconf -t' or via
'C_GetTokenInfo').

If no token group is specified, then the token is owned by the 'pkcs11' group
like before this change.

If a token user group is specified, then the pkcsslotd checks if that group
exists, and if all members of that group are also members of the 'pkcs11'
group. This is required to be able to access the pkcsslotd socket at all.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>

2024-08-12 14:46:21 +02:00

apiclient.h

Conform to PKCS 11 v3.0 Baseline Provider profile - part 1

2020-10-14 10:59:54 +02:00

apictl.h

API/EP11: Lock API functions against HSM MK change state changes

2023-03-14 10:19:10 +01:00

ec_curves.h

Add Edwards curve OIDs

2020-01-27 14:39:42 +01:00

events.h

events: Add HSM master key change events