Issue 29933 in chromium-os: Optimize PKCS #11 termination on logout

[chrom...@googlecode.com]

Status: Untriaged
Owner: dkr...@chromium.org
Labels: Type-Feature Area-Enterprise Pri-1 Mstone-20

New issue 29933 by dkr...@chromium.org: Optimize PKCS #11 termination on
logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Chapsd should watch for the session_state_changed D-Bus signal emitted by
the session manager and start processing the logout before ui.conf
terminates PKCS #11.

[chrom...@googlecode.com]

Updates:
Status: Started

Comment #3 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

(No comment was entered for this change.)

[chrom...@googlecode.com]

Updates:
Labels: -ReleaseBlock-Beta ReleaseBlock-Stable

Comment #4 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

[chrom...@googlecode.com]

Comment #5 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Discussed with Sumit offline. We'll first vet this fix in R21 and decide
later whether to merge it to R20.

[chrom...@googlecode.com]

Comment #6 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Fixed in R21: https://gerrit.chromium.org/gerrit/22426

[chrom...@googlecode.com]

Updates:
Status: Fixed
Labels: -Mstone-20 -ReleaseBlock-Stable Mstone-21

Comment #8 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Will not be merged to R20.

[chrom...@googlecode.com]

Comment #9 on issue 29933 by dkr...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Here are some details on how to manually test this fix:
1) Login.
2) Create some keys.
> p11_replay --generate
> p11_replay --generate
> p11_replay
3) Check that chapsd does have file handles open on /home/chronos/user.
> sudo lsof | grep "chapsd.*/home/chronos/user"
4) Unload and immediately check that there are no open file handles.
> sudo chaps_client --unload --path=/home/chronos/user/.chaps; !!
5) Check the syslog to verify timing - there will be three messages in the
log:
(1) chapsd: Token at ... has been removed from slot ...
(2) chaps_client: Sent Event:...
(3) chapsd: Unloaded keys...
The important thing is that message (2) occurs after message (1) and not
after (3). A delay (>100ms) should be visible between (2) and (3) but no
significant delay between (1) and (2).

[chrom...@googlecode.com]

Updates:
Status: Verified

Comment #10 on issue 29933 by bmaha...@chromium.org: Optimize PKCS #11

termination on logout
http://code.google.com/p/chromium-os/issues/detail?id=29933

Verified the fix as per the above steps. 2465.74,0,R21.