Session keyring stored on disk in plain text
Bug #539180 reported by
Torsten Spindler
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
GNOME Keyring |
Fix Released
|
Medium
|
|||
gnome-keyring (Ubuntu) |
Fix Released
|
High
|
Canonical Desktop Team | ||
Lucid |
Fix Released
|
High
|
Canonical Desktop Team |
Bug Description
Binary package hint: gnome-keyring
Using gnome session keyring passwords are stored in plain text on file, instead of merely in memory. When running the example set program, the password will be shown in plain text here: ~/.gnome2/
http://
"The keyring manager also provides a session keyring. Items in the session keyring are never stored on disk, and are lost as soon as the user's session ends. The session keyring can be used to store passwords to be used in the current session only."
Related branches
tags: | added: regression-potential |
visibility: | private → public |
Changed in gnome-keyring (Ubuntu Lucid): | |
milestone: | none → ubuntu-10.04-beta-2 |
status: | New → Confirmed |
importance: | Undecided → High |
Changed in gnome-keyring (Ubuntu Lucid): | |
assignee: | nobody → Canonical Desktop Team (canonical-desktop-team) |
description: | updated |
Changed in gnome-keyring: | |
importance: | Unknown → Medium |
status: | Unknown → Fix Released |
To post a comment you must log in.
Attached is an example program that sets and retrieves a password from the gnome session keyring.