gnome keyring loses focus upon startup

Bug #568921 reported by [euchrid]
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
fluxbox (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

Binary package hint: gnome-keyring

When gnome-keyring prompts for a password, it does not keep its focus, but DOES remain on top.

This gives the impression that the password can be entered.

However, when a user enters the password, it is entered into whatever window actually has the focus. In my case, this is normally a text editor, and so the password is displayed rather than hidden. Obviously, this is a security issue in a public environment.

This behaviour does NOT occur with other programs that require password entry. gksudo (or gksu), for example, behaves in the way I would expect, taking the focus, and preventing other windows from having that focus.

I am running Ubuntu 9.10 karmic, using fluxbox as the window manager, although I do not believe that this is a fluxbox issue, as it appears to be caused by the order in which the windows open.

The version of gnome-keyring I have installed is: 2.28.1-0ubuntu1

Tags: gnome keyring
[euchrid] (euchrid)
visibility: private → public
Revision history for this message
Sebastien Bacher (seb128) wrote :

the issue is a wm one

affects: gnome-keyring (Ubuntu) → fluxbox (Ubuntu)
Revision history for this message
[euchrid] (euchrid) wrote :

I am not convinced that this is a window manager issue. gksudo and other programs that ask for passwords do not behave in the same manner as gnome-keyring, and I have encountered no remotely similar problems to this in fluxbox. I have around 200 GUI programs installed that are used regularly, and this focus behaviour does not repeat in any of them.

In any case, if gksudo has the added security feature of being able too over-ride the focus of the desktop and window manager, then is there any reason why could gnome-keyring not be improved in order to make it behave in the same way?

security vulnerability: yes → no
Revision history for this message
Paul Tagliamonte (paultag) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. The issue that you reported is one that should be reproducible with the live environment of the Desktop CD of the development release - Maverick Meerkat. It would help us greatly if you could test with it so we can work on getting it fixed in the next release of Ubuntu. You can find out more about the development release at http://www.ubuntu.com/testing/ . Thanks again and we appreciate your help.

Changed in fluxbox (Ubuntu):
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for fluxbox (Ubuntu) because there has been no activity for 60 days.]

Changed in fluxbox (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.