Re: [Tails-dev] PGP Smart Cards

Delete this message

Reply to this message
Author: alan
Date:  
To: tails-dev
Subject: Re: [Tails-dev] PGP Smart Cards

> From: Maxim Kammerer <mk@???>
> Date: Tue, 28 Aug 2012 03:25:20 +0200
>
> On Tue, Aug 28, 2012 at 1:19 AM, Patrick Bx <patrickbx@???> wrote:
> > Ran into those same issues myself. Root is necessary unless the
> > amnesia user is added to the pcscd group.
>
> This shouldn't be the case when pcsc-lite is installed, since scdaemon
> uses libpcsclite.so by default, and libusb interface is secondary
> (although, on Debian GnuPG might be compiled differently). The "pcscd"
> group exists only for pcsclite, see
> http://ludovicrousseau.blogspot.com/2010/09/pcscd-auto-start.html:
> “The group "pcscd" should be used only by pcsc-lite so only pcscd has
> access to smart card readers. The pcscd process has only gained the
> minimum rights needed to do its job (instead of gaining root access).”
>

As of my tests, GnuPG links directly to libpcsclite. It worked for me
(at lease as root) without pcscd installed. It's the way they recommand
on their website[1]. They use udev rules to solve the permission issues.
However, the links to the file containing these rules is (was?) broken.

Cheers,

[1]. http://gnupg.org/howtos/card-howto/en/ch02s03.html


--