Hi,

Ah, ok, that explains why a seemingly unsafe setting like this would wind up 
as the default. Yes, having this labeled "Remember password for X hours/days" 
would definitely help. 

Also, having it default to just remember it for the session only would be 
acceptable, as that provides the user with a clear understanding of how long 
this lasts. (Not sure how people would fare with this, if they always suspend 
their pc and never log out of a session, though).

Cheers,
  Johannes

On Thursday 01 November 2012 23:33:29 Matthias Klumpp wrote:
> Hi!
> The "Remember auth" comes from PolicyKit, where "auth_keep" is set for
> this specific request. The frontend can't do anything about it, but
> the password will only be remembered for a short time, so a solution
> is probably to change the current string to something more meaningful.
> The current one suggests the password is saved, which it clearly is
> not.
> Cheers,
>    Matthias
> 
> 2012/10/21 Johannes Zarl <[email protected]>:
> > Package: apper
> > Version: 0.7.2-4
> > Severity: normal
> > 
> > Dear Maintainer,
> > 
> > I recently tried apper as a gui for system-updates, and it mostly does
> > what it should. However, everytime it requests authorization for gaining
> > administrative privileges, the Polkit dialog has "Remember
> > Authorization" enabled by default.
> > 
> > Why I think the current default is a bad choice:
> > 
> > If one doesn't want the dialog to remember the credentials, one
> > currently has to change the selection _every_single_time_ the dialog
> > comes up. Changing the default to "don't remember password" makes the
> > user less likely to choose the wrong setting in this case. If the user
> > forgets to change the setting, the dialog will not come up again, so the
> > user is then stuck with the "wrong" setting.
> > 
> > If one really wants to never see this dialog again, one can choose
> > "Remember Authorization" once and won't be much worse off than now.
> > Especially, if he/she forgets to select the "remember password" box,
> > he/she gets a chance to select the correct setting the next time the
> > dialog is displayed.
> > 
> > I'm unsure whether I should file a bug against apper or polkit-kde-1 for
> > this issue (and which package is to blame for the preselection of
> > "remember password"). Please reassign to polkit if the bug is more
> > appropriate there.
> > 
> > 
> > -- System Information:
> > Debian Release: wheezy/sid
> > 
> >   APT prefers unstable
> >   APT policy: (500, 'unstable')
> > 
> > Architecture: amd64 (x86_64)
> > Foreign Architectures: i386
> > 
> > Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
> > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> > Shell: /bin/sh linked to /bin/dash
> > 
> > Versions of packages apper depends on:
> > ii  apper-data           0.7.2-4
> > ii  kde-runtime          4:4.8.4-1
> > ii  libc6                2.13-35
> > ii  libdebconf-kde0      0.2-2
> > ii  libgcc1              1:4.7.2-4
> > ii  libkcmutils4         4:4.8.4-3
> > ii  libkdecore5          4:4.8.4-3
> > ii  libkdeui5            4:4.8.4-3
> > ii  libkemoticons4       4:4.8.4-3
> > ii  libkidletime4        4:4.8.4-3
> > ii  libkio5              4:4.8.4-3
> > ii  libkprintutils4      4:4.8.4-3
> > ii  libkutils4           4:4.8.4-3
> > ii  libkworkspace4abi1   4:4.8.4-3
> > ii  libpackagekit-qt2-2  0.7.6-1
> > ii  libqt4-dbus          4:4.8.2+dfsg-2
> > ii  libqt4-network       4:4.8.2+dfsg-2
> > ii  libqt4-sql           4:4.8.2+dfsg-2
> > ii  libqt4-svg           4:4.8.2+dfsg-2
> > ii  libqt4-xml           4:4.8.2+dfsg-2
> > ii  libqt4-xmlpatterns   4:4.8.2+dfsg-2
> > ii  libqtcore4           4:4.8.2+dfsg-2
> > ii  libqtgui4            4:4.8.2+dfsg-2
> > ii  libsolid4            4:4.8.4-3
> > ii  libstdc++6           4.7.2-4
> > ii  packagekit           0.7.6-1
> > ii  policykit-1-gnome    0.105-2
> > ii  polkit-kde-1         0.99.0-3
> > 
> > Versions of packages apper recommends:
> > ii  app-install-data  2012.06.16.1
> > 
> > Versions of packages apper suggests:
> > pn  apper-appsetup           <none>
> > pn  debconf-kde-helper       <none>
> > pn  software-properties-kde  <none>
> > 
> > -- no debconf information


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to