Bug#878678: [Reportbug-maint] Bug#878678: reportbug: [PATCH] Store SMTP password with libsecret if available

[Ville Skyttä]

control: tags +security

Oh, that's highly unfortunate, plaintext passwords in config files are not
good from security point of view. How about a slightly modified version
that uses libsecret only if available _and_ explicitly configured to do so?

Bug#878678: reportbug: [PATCH] Store SMTP password with libsecret if available

[Ville Skyttä]

Package: reportbug
Version: 7.1.7ubuntu1
Severity: wishlist

Dear Maintainer,

Attached is a 'git am'able patch that adds support for storing SMTP
passwords with libsecret if available. When stored this way, SMTP
passwords don't need to be specified at all in reportbugrc.

-- Package-specific info:
** Environment settings:
EDITOR="emacs"
PAGER="less"
DEBEMAIL="ville.sky...@iki.fi"
DEBFULLNAME="Ville Skytt\udcc3\udca4"
INTERFACE="text"

** /home/scop/.reportbugrc:
reportbug_version "7.1.7ubuntu1"
mode novice
ui text
smtphost "smtp.gmail.com:587"
smtpuser "vsky...@gmail.com"
smtppasswd 
smtptls
no-cc

-- System Information:
Debian Release: stretch/sid
  APT prefers artful
  APT policy: (500, 'artful')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-16-generic (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages reportbug depends on:
ii  apt1.5
ii  python33.6.3-0ubuntu2
ii  python3-reportbug  7.1.7ubuntu1

reportbug recommends no packages.

Versions of packages reportbug suggests:
pn  claws-mail  
pn  debconf-utils   
pn  debsums 
pn  dlocate 
ii  emacs25-bin-common  25.2+1-6
ii  file1:5.32-1
ii  gir1.2-gtk-3.0  3.22.21-0ubuntu1
ii  gir1.2-vte-2.91 0.48.4-0ubuntu1
ii  gnupg   2.1.15-1ubuntu8
pn  postfix | exim4 | mail-transport-agent  
ii  python3-gi  3.24.1-2build1
ii  python3-gi-cairo3.24.1-2build1
pn  python3-gtkspellcheck   
pn  python3-urwid   
ii  xdg-utils   1.1.1-1ubuntu2

Versions of packages python3-reportbug depends on:
ii  apt1.5
ii  file   1:5.32-1
ii  python33.6.3-0ubuntu2
ii  python3-debian 0.1.30
ii  python3-debianbts  2.6.1
ii  python3-requests   2.18.1-1

python3-reportbug suggests no packages.

-- no debconf information


0001-submit.py-Store-SMTP-password-with-libsecret-if-avai.patch.gz
Description: application/gzip