From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id F2B1DC43381 for ; Sat, 23 Mar 2019 08:12:26 +0000 (UTC) Received: from krantz.zx2c4.com (krantz.zx2c4.com [192.95.5.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 39313218E2 for ; Sat, 23 Mar 2019 08:12:25 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=zx2c4.com header.i=@zx2c4.com header.b="L7ouPi5f" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 39313218E2 Authentication-Results: mail.kernel.org; dmarc=pass (p=none dis=none) header.from=zx2c4.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=wireguard-bounces@lists.zx2c4.com Received: from krantz.zx2c4.com (localhost [IPv6:::1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 42e9a026; Sat, 23 Mar 2019 08:11:45 +0000 (UTC) Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 530695cd for ; Sat, 23 Mar 2019 08:11:44 +0000 (UTC) Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id a9b210d8 for ; Sat, 23 Mar 2019 08:11:44 +0000 (UTC) Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 2995a31e for ; Sat, 23 Mar 2019 07:50:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=zx2c4.com; h=mime-version :references:in-reply-to:from:date:message-id:subject:to:cc :content-type; s=mail; bh=Ow8eaqx2lXhiShhBrCMWAXKPbLs=; b=L7ouPi 5feR4HUqLldKuV+jq1s652m9JCK7UusvDAvzMmxOVpOd+k+XK6LThzljk5rZdkv1 x41z7/WY1UA/55N1p8VaiDXOvTA3Yjii1hlBx4BIz7bDKphMs4HwQLb8kFzusthd /zFBPgy0lDN5Ix6/P42+SQXEd99/zg6Tb8htVOpvvpdGG0GsgcCS3fjw1HzistFQ 4tDUb/IVapTZz/DaefqQtKMrhyjBSp9idiVjKlhFbuoD8GdVQo/GYkbl9dBaYOlo x9AnZrBtqE/L5z+1SdAbAK+ac+2+f0pRgA9jfNmTgcxPGZMzc17EmLdLq15goJUZ 4TVtGyhurjEtlWvA== Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 25824ef9 (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO) for ; Sat, 23 Mar 2019 07:50:32 +0000 (UTC) Received: by mail-oi1-f182.google.com with SMTP id 67so3448951oif.10 for ; Sat, 23 Mar 2019 01:12:23 -0700 (PDT) X-Gm-Message-State: APjAAAUIm1C5Aeju8pVwhp0KT5X5PaJ6RdyB29huk3HVSPmVoQJsjs+p 4HJCLhM3Q3MAoxpD0yMabZtxNPH2i1WXS4VUcNw= X-Google-Smtp-Source: APXvYqwdDGpvrSjgGrCuBjIYwoiwPw9fhYW94cI5i0iVq2upmz+MRsl+pBYLrp7nXA4LMz0T6n8xZhz5lEJ1C6lddIM= X-Received: by 2002:aca:550c:: with SMTP id j12mr4838439oib.52.1553328742817; Sat, 23 Mar 2019 01:12:22 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "Jason A. Donenfeld" Date: Sat, 23 Mar 2019 09:12:09 +0100 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Issues with multiuser macOS (Sven Grunewaldt) To: Vick Lee Cc: Roopesh Chander S , WireGuard mailing list X-BeenThere: wireguard@lists.zx2c4.com X-Mailman-Version: 2.1.15 Precedence: list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: wireguard-bounces@lists.zx2c4.com Sender: "WireGuard" Thanks, I've added this to our list, and we'll look into it: https://docs.google.com/document/d/1BnzImOF8CkungFnuRlWhnEpY2OmEHSckat62aZ6LYGY I assume it has something to do with keychain profiles being per-user while tunnels are per-system. Currently we employ some logic for detecting when these are out of sync and remove partial data. We might have to be a bit smarter about that and consider the multi-user scenario. If you come up with a patch before Roopesh or I do, don't hesitate to mail it to this thread. Jason _______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard