[EPIC-16] Secrets Service integration #16

Closed
opened 2026-07-26 23:18:28 +02:00 by elegos · 0 comments
Owner

Autonomous wallet unlock after successful biometric auth.

Scope

  • KDE Wallet: kwallet5 socket protocol
  • GNOME Keyring: gnome-keyring PAM socket
  • Fallback: org.freedesktop.secrets Collection.Unlock
  • Option A: store user-provided wallet password (TPM-sealed)
  • Option B: generate + set random wallet password (TPM-sealed, recommended)
  • zeroize credential immediately after unlock call
  • Session type detection via XDG_CURRENT_DESKTOP / D-Bus presence
Autonomous wallet unlock after successful biometric auth. ## Scope - KDE Wallet: kwallet5 socket protocol - GNOME Keyring: gnome-keyring PAM socket - Fallback: org.freedesktop.secrets Collection.Unlock - Option A: store user-provided wallet password (TPM-sealed) - Option B: generate + set random wallet password (TPM-sealed, recommended) - zeroize credential immediately after unlock call - Session type detection via XDG_CURRENT_DESKTOP / D-Bus presence
elegos added this to the EPIC-16 milestone 2026-07-26 23:18:28 +02:00
elegos added this to the Foundation project 2026-07-26 23:21:30 +02:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
elegos/linux-hello#16
No description provided.