*** This bug is a duplicate of bug 246185 ***
https://bugs.launchpad.net/bugs/246185
I picked up on that too. This is why I said, "Redesign the keyring
feature or drop the feature." Unlocking for all apps is already
happening, and already a security vulnerability. But since *that* issue
is a different bug, the least you can do is communicate which
application is requesting access, *and* inform the user that clicking
"Allow" will also unlock the keyring for other applications. Full
disclosure. Why the secrecy? It's just another sentence, not like it
means writing a book to the user. Give the user enough information to
decide whether to click 'Allow' or not. Or, simply, drop the keyring
feature.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1293790
Title:
"An application wants access to the keyring" (*which* application is
not specified)
Status in “gnome-keyring” package in Ubuntu:
New
Bug description:
I have Ubuntu 13.10 Desktop installed. I am being prompted with this
message: "Title: 'Unlock Keyring' - An application wants access to the
keyring 'default', but it is locked. Password? [____]" Note that in
this case there is no "Details >" expansion control, no "reveal more",
no button to "view details" etc.
This is not an unfamiliar message, similar concepts exist for both
Windows and Mac, and the behavior derives from earlier forms of Linux.
The idea of a keyring specifically is something I used on the Mac.
I have some beef with this message in Ubuntu's form, however. What
application is requesting this? Accessing a keyring with a password is
asking for a Master password, one password to rule them all. One
cannot, and should not, just hand out this master password to any
application. So what application wants access to the keyring??
IMO this failure to disclose who is asking for the master password is
critically bad security.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1293790/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
