[Bug 3491] Cannot import FIDO2 keys when macOS lockdown mode enabled

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3491

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
>From the debug log, it appears that ssh-add was successfully
downloading the keys from your FIDO2 token, but failing to add them to
ssh-agent. I wonder if lockdown mode is simply breaking ssh-agent?

Could you confirm that key download works using "ssh-keygen -K"?

If that works, are you able to add them to ssh-agent directly using
ssh-add?

According to https://support.apple.com/en-us/HT212650 it is possible to
exempt particular applications from the lockdown. Maybe you could
exempt ssh-agent?

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.