Package: keyutils
Version: 1.6.1-2
Severity: minor
Christian, et al,
keyutils includes cifs.patch, which inserts the following lines
into /etc/request-key.conf:
+create cifs.spnego * * /usr/sbin/cifs.upcall -c %k
+create dns_resolver * * /usr/sbin/cifs.upcall %k
However, the first line is already provided by cifs-utils in:
/etc/request-key.d/cifs.spnego.conf
and cifs.upcall(8) recommends against the second line:
The keyutils package has also started including a dns_resolver
handling program as well that is preferred over the one
in cifs.upcall. If you are using a keyutils version equal
to or greater than 1.5, you should use key.dns_resolver to
handle the dns_resolver keytype instead of cifs.upcall.
Thus, cifs.patch should be removed.
Thank you!
Daniel Lewart
Urbana, Illinois
