The attachment "0001-Require-login-password-to-view-plaintext-
secrets.patch" seems to be a patch.  If it isn't, please remove the
"patch" flag from the attachment, remove the "patch" tag, and if you are
a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to seahorse in Ubuntu.
https://bugs.launchpad.net/bugs/189774

Title:
  seahorse shows passwords without verification

Status in seahorse:
  New
Status in seahorse package in Ubuntu:
  Triaged

Bug description:
  Binary package hint: seahorse

  When I log in the first time, I get asked for my password to access
  the wireless network.

  Then any time later I can run seahorse (without authentication) and go
  and look at my wireless password (password tab / passphrase for
  wireless network / properties). It just asks me 'Do you want to allow
  access?' and if I say yes (ie 'Allow Once' or 'Allow Always'), it
  doesn't ask for authentication or anything, it just shows the
  password.

  Isn't this a security problem?

  If I reboot just X with CTRL-ALT-BS and log in again, when I run
  seahorse it asks me for authentication to run it, but after a full
  reboot it doesn't ask for any authentication.

  I have automatic login enabled (so on full reboot I don't need to
  login via the X login window) if that makes any difference.

  Version info:

  distro: hardy alpha 4

  kernel:  2.6.24-5-generic

  seahorse: 2.21.4-0ubuntu2

  gnu-pg: 1.4.6-2ubuntu5

  python-gnupginterface: 0.3.2-9ubuntu1

To manage notifications about this bug go to:
https://bugs.launchpad.net/seahorse/+bug/189774/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to