Your message dated Tue, 2 Jan 2018 10:16:23 +0100
with message-id <20180102091623.4rhjcyycfa5a7r4y@busgosu>
and subject line Re: Bug#876555: claws-mail keep gpg passphrase in memory eve 
if store_passphrase=0
has caused the Debian Bug report #876555,
regarding claws-mail keep gpg passphrase in memory eve if store_passphrase=0
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
876555: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876555
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: claws-mail
Version: 3.14.1-3+b1
Severity: important

Dear Maintainer,

Since the upgrade to Stretch and claws-mail 3.14.1, I found that claws-mail 
remember the gpg passphrase instead of asking it for every send.
I double-check the config and I have:
use_gpg_agent=0
store_passphrase=0
in ~.claws-mail/clawsrc.

I use severity: important as it could be a security issue
(leave your computer one minute and someone send an e-mail signed by you!).

Don't hesitate to ask me if you need more info, or correct me if I miss 
something in the configuration.

Thanks for maintaining claws-mail in Debian.

Baptiste

-- System Information:
Debian Release: 9.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), 
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages claws-mail depends on:
ii  libatk1.0-0          2.22.0-1
ii  libc6                2.24-11+deb9u1
ii  libcairo2            1.14.8-1
ii  libcompfaceg1        1:1.5.2-5+b2
ii  libdb5.3             5.3.28-12+b1
ii  libdbus-1-3          1.10.18-1
ii  libdbus-glib-1-2     0.108-2
ii  libenchant1c2a       1.6.0-11+b1
ii  libetpan17           1.6-3
ii  libfontconfig1       2.11.0-6.7+b1
ii  libfreetype6         2.6.3-3.2
ii  libgdk-pixbuf2.0-0   2.36.5-2
ii  libglib2.0-0         2.50.3-2
ii  libgnutls30          3.5.8-5+deb9u2
ii  libgtk2.0-0          2.24.31-2
ii  libice6              2:1.0.9-2
ii  libldap-2.4-2        2.4.44+dfsg-5
ii  liblockfile1         1.14-1+b1
ii  libpango-1.0-0       1.40.5-1
ii  libpangocairo-1.0-0  1.40.5-1
ii  libpangoft2-1.0-0    1.40.5-1
ii  libpisock9           0.12.5-dfsg-2+b3
ii  libsasl2-2           2.1.27~101-g0780600+dfsg-3
ii  libsm6               2:1.2.2-1+b3
ii  xdg-utils            1.1.1-1
ii  zlib1g               1:1.2.8.dfsg-5

Versions of packages claws-mail recommends:
ii  aspell-fr [aspell-dictionary]  0.50-3-8
ii  claws-mail-i18n                3.14.1-3
ii  xfonts-100dpi                  1:1.0.4+nmu1

Versions of packages claws-mail suggests:
pn  claws-mail-doc                     <none>
pn  claws-mail-tools                   <none>
ii  dillo [www-browser]                3.0.5-3
ii  firefox-esr [www-browser]          52.3.0esr-1~deb9u1
pn  gedit | kwrite | mousepad | nedit  <none>
ii  midori [www-browser]               0.5.11-ds1-4+b1
ii  uzbl [www-browser]                 0.0.0~git.20120514-1.2
ii  w3m [www-browser]                  0.5.3-34

-- no debconf information

--- End Message ---
--- Begin Message ---
Hi Baptiste and happy new year!

On Wed, Dec 27, 2017 at 06:07:47PM +0100, Baptiste Jammet wrote:
> Control: severity -1 normal
> 
> Hello, 
> 
> >Since the upgrade to Stretch and claws-mail 3.14.1, I found that
> >claws-mail remember the gpg passphrase instead of asking it for every
> >send.
> 
> Sorry, but t seems I over-reacted with this.
> Claws remembers the passphrase only some minutes (seconds?) with the
> above settings. It asks passphrase again after some more times.
> 
> So I'm lowering severity, as I think this is the expected feature.
> 
> Sorry for the noise, feel free to close this without more actions.

No problem, sorry for not having time to deal with this before ;-) and
thanks for the feedback. Closing it now.

best regards,
-- 
  Ricardo Mones 
  ~
  You have the capacity to learn from mistakes. You'll learn a lot 
  today.                                           /usr/games/fortune

Attachment: signature.asc
Description: PGP signature


--- End Message ---

Reply via email to