summaryrefslogtreecommitdiff
path: root/src/veritysetup
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2020-07-17 12:58:19 +0200
committerLennart Poettering <lennart@poettering.net>2020-07-21 10:32:01 +0200
commit49f16281c90c22d34b3511c27d43ebacf22fac62 (patch)
tree304cab60889a67527bd12d54ada1a12d575d0abc /src/veritysetup
parentc668aa8b351717cfce766cbe85a82cb3c2d40d18 (diff)
downloadsystemd-49f16281c90c22d34b3511c27d43ebacf22fac62.tar.gz
tree-wide: use READ_FULL_FILE_CONNECT_SOCKET at various places
Let's use the new flag wherever we read key material/passphrases/hashes off disk, so that people can plug in their own IPC service as backend if they like, easily. (My main goal was actually to support this for crypttab key files — i.e. that you can specify AF_UNIX sockets as third column in crypttab — but that's harder to implement, since the keys are read via libcryptsetup's API, not ours.)
Diffstat (limited to 'src/veritysetup')
-rw-r--r--src/veritysetup/veritysetup.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/veritysetup/veritysetup.c b/src/veritysetup/veritysetup.c
index 465d194b40..e475402d9d 100644
--- a/src/veritysetup/veritysetup.c
+++ b/src/veritysetup/veritysetup.c
@@ -100,7 +100,7 @@ static int run(int argc, char *argv[]) {
if (r < 0)
return log_error_errno(r, "Failed to parse root hash signature '%s': %m", argv[6]);
} else {
- r = read_full_file_full(AT_FDCWD, argv[6], 0, &hash_sig, &hash_sig_size);
+ r = read_full_file_full(AT_FDCWD, argv[6], READ_FULL_FILE_CONNECT_SOCKET, &hash_sig, &hash_sig_size);
if (r < 0)
return log_error_errno(r, "Failed to read root hash signature: %m");
}