Correct minor errors in efikeygen.

Signed-off-by: Peter Jones <pjones@redhat.com>
[pesign-client] Fix a wrong error message in handle_signing()

Vivek noticed that I copy-pastad an error block from
handle_unlock_token() into handle_signing() and forgot to chane it.

Signed-off-by: Peter Jones <pjones@redhat.com>
make sure that pesign drop all supplementary group when started

Since the daemon only use the setuid/setgid for avoiding running
as root, making sure we have relinquished the supplementary group
should be enough.
add peverify to the ignore list
Install into $(DESTDIR), not '/' by default

In order to be built in a "normal" buildsystem, DESTDIR needs to be
honored.

Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Merge pull request #5 from gregkh/master

Install into $(DESTDIR), not '/' by default
Merge pull request #3 from mscherer/complete_git_ignore

add peverify to the ignore list
Merge pull request #4 from mscherer/fix_group

make sure that pesign drop all supplementary group when started
Work around pesign bug with -u

For some reason right now -u has to be at the end of the command line.
This doesn't seem to be true if it's not POPT_ARG_INT, so... make it not
a POPT_ARG_INT.

Signed-off-by: Peter Jones <pjones@redhat.com>
Don't call finalize_signatures if we're calling close_output()

close_output() /calls/ finalize_signatures(), so there's no need
to call it beforehand.

Signed-off-by: Peter Jones <pjones@redhat.com>
Make removing signature #0 actually work when it's not the only one.

Valgrind really is god's gift to C programmers.

Signed-off-by: Peter Jones <pjones@redhat.com>
Update signing macro for RHEL.

Signed-off-by: Peter Jones <pjones@redhat.com>
Bump version to 0.109

Signed-off-by: Peter Jones <pjones@redhat.com>
Replace voodoo key usage code with something that actually works.

The code that was there wasn't merely wrong, it was bad at being
wrong.

Signed-off-by: Peter Jones <pjones@redhat.com>
[efikeygen] Fix stupid buffer overflow.

Yeah, you gotta initialize that iterator, Peter.

Signed-off-by: Peter Jones <pjones@redhat.com>
Use the right signing method on the RHEL signing macro.

Signed-off-by: Peter Jones <pjones@redhat.com>
Fix error detected by coverity.

Signed-off-by: Peter Jones <pjones@redhat.com>
One more tweak for RHEL signing rules.

It never ends.

Signed-off-by: Peter Jones <pjones@redhat.com>
Allow some commands to proceed without a NSS db

The NSS db is not necessary to calculate the hash, to show the
signature or to export the signed attributes.

Signed-off-by: Gary Ching-Pang Lin <glin@suse.com>