Password-protected smb:// URLs are displayed in Nautilus browser address bar with inline plain-text password

[Nick Maynard]

Using the "Places"->"Connect to server" functionality in Gnome and allowing permanent keyring access, creating a bookmark as suggested.

When I open the mounted volume the URL displayed at the top of the directory browser window is of the following format:

smb://PLAINTEXT_PASSWORD;USER@HOSTNAME/SHARE/

Displaying the password in plaintext on the screen like this is a major security violation according to my place of work's IT security rules.

[Nick Maynard (nick-maynard)]

karmic
Package: libgnomevfs2-extra
Version: 1:2.24.2-1ubuntu1

[Nick Maynard (nick-maynard)]

On further examination it appears the bookmark, created in "Places", stores the password in plaintext; thus mounts created with it include the password.

Shouldn't the keyring handle this password storage? It seems the bookmark doesn't need to store the password.