SSH key kept unlock after usage

[Stéphane Graber]

Binary package hint: gnome-keyring

When connecting to another computer using SSH, the gnome-keyring SSH agent window pops up and ask for my key,
I enter my key and confirm, the SSH connection is established.

Now, I close the first SSH connection and open another, it connects directly without asking for my key.
I didn't check the "Automatically unlock" box, so it should have asked for the key again.

Step to reproduce :
-Logout (so the gnome-keyring-daemon is reloaded and all keys locked again)
-Login and open a terminal
-Connect to a server using SSH
-The gnome-keyring will ask for the key, do not check the "Automatically unlock" box
-Once the SSH connection established, disconnect
-Then open a new one using the same SSH key
-It won't ask for the key and will directly open the connection

[Emilio Pozuelo Monfort (pochu)]

I have the same here.

[Emilio Pozuelo Monfort (pochu)]

This is potentially exploitable (if I leave my computer someone could use my key to log in somewhere out there, when I'm expecting the key not being usable)

[Sebastien Bacher (seb128)]

I've sent it upstream on http://bugzilla.gnome.org/show_bug.cgi?id=502846

[Stefan Nuxoll (snuxoll)]

Ideal solution would be having a choice of Forget Immediately/Remember for remainder of session/Always remember, like the nautilus dialog that appears when connecting to a network share.

[Sebastien Bacher (seb128)]

upstream says that's not a bug and closed the bug with explanations, you can read the GNOME bug for details, doing the same on the ubuntu task now