missing options in seahorse-tool

Bug #1478663 reported by Ed Bunker
272
This bug affects 3 people
Affects Status Importance Assigned to Milestone
seahorse-nautilus (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Release: Ubuntu 14.04.2 LTS
Package version: 3.8.0-0ubuntu2

When you click on an encrypted file to open it, the dialog window asking for the passphrase to unlock the secret key does not offer the options to forget the password, like in previous versions.

On Precise, for instance, you were given the options to forget it after X minutes, or to forget it if idle for X minutes.

On Trusty, the only selectable option is "automatically unlock this keyring whenever i'm logged in", which is crazy.
The result is that if you unlock the secret key, it stays unlocked until you log out, which is a bit less crazy but not good.

A workaround to avoid this sillyness is to click on the cancel button and then enter the passphrase on the second dialog window that opens right after. This way the secret key works only once for the encrypted file you opened.
I think this is just silly, dangerous and a regression from previous versions.

Ed Bunker (calvin441h)
information type: Private Security → Public Security
Revision history for this message
Filippo Panessa (filippo-panessa) wrote :

I also notice that, starting from 14.04, there's no seahorse options in confd. Therefore this option was removed intentionally without keep in mind security risk.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in seahorse-nautilus (Ubuntu):
status: New → Confirmed
Revision history for this message
Bartolo (barcal) wrote :

I have the same problem on ubuntu 15.04. The only selectable option "automatically unlock this keyring whenever i'm logged in" is a real security risk

Revision history for this message
Filippo Panessa (filippo-panessa) wrote :

Of course confd is a typo. I meant dconf.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.