With the restricted socket configuration, gpg-agent can produce interesting log entries. We should make sure the most interesting events are included in the default sublogmon conf:
[thunderbird-clear] $ gpg --export-secret-keys
gpg: keyserver option 'no-try-dns-srv' is unknown
gpg: error getting the KEK: Forbidden
gpg: WARNING: nothing exported
Meanwhile, in syslog:
Oct 5 22:18:15 subgraph gpg-agent[4054]: command 'KEYWRAP_KEY' failed: Forbidden
With the restricted socket configuration, gpg-agent can produce interesting log entries. We should make sure the most interesting events are included in the default sublogmon conf:
[thunderbird-clear] $ gpg --export-secret-keys gpg: keyserver option 'no-try-dns-srv' is unknown gpg: error getting the KEK: Forbidden gpg: WARNING: nothing exported
Meanwhile, in syslog:
Oct 5 22:18:15 subgraph gpg-agent[4054]: command 'KEYWRAP_KEY' failed: Forbidden