13 lines
586 B
Markdown
13 lines
586 B
Markdown
# Native credential boundary
|
|
|
|
This crate is the storage boundary used by the future Linux AppImage shell.
|
|
`Settings` writes only `server_address` and `username` to the client
|
|
`settings.json`. Session credentials are stored under the Linux kernel
|
|
keyring service `trixie.server.session`, scoped by server address and
|
|
username. `load_session` returns `None` when the keyring is unavailable;
|
|
callers must return to credential entry and must not create a plaintext
|
|
fallback.
|
|
|
|
The crate uses `keyctl` with argument arrays, never a shell command. It does
|
|
not log or serialize session values.
|