Ubuntu
python-keyring package

  1. Bug #686257
  2. Comment #10

Comment 10 for bug 686257

Revision history for this message
Leonard Richardson (leonardr) wrote : Re: upgrade to python-keyring 0.5 (and MIR)

Kees, when you have some time can we get your opinion on the python-keyring module? Specifically this concern noted by Martin:

The main problem that I see here is that it's handling a lot of passwords, and doesn't use any kind of mlock()-like protection anywhere. So passwords are copied around a lot and get easily written to disk unencrypted, once this gets into swap.

Feel free to ping benji for a walk through the code.