Package: gmailfs
Version: 0.4-1
Severity: important

one can only specify username and password through either command line or 
/etc/gmail/gmailfs.conf. Both is IMO a serious security concern as it expose
the password.

Please consider either do it through a prompt or takes it from a file 
descriptor as in losetup which now support cryptoloop

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.31-xbox-chimpanzee-vs-ll
Locale: LANG=, LC_CTYPE= (charmap=ANSI_X3.4-1968)

Versions of packages gmailfs depends on:
ii  fuse-utils           2.2.1-4sarge2       Filesystem in USErspace (utilities
ii  python               2.3.5-2             An interactive high-level object-o
ii  python-fuse          2.2-2               Python bindings for FUSE (Filesyst
ii  python-libgmail      0.0.8+cvs20050208-2 Python bindings to access Gmail ac

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to