*** This bug is a duplicate of bug 246185 ***
https://bugs.launchpad.net/bugs/246185
Yeah. "At this point putting up a label for which application is accessing the
secret
isn't that easy, and it's very hard to get it completely right. It would be
nice to get this working, but unless someone pitches in with a plan/code, it's
currently at a lower priority than other gnome-keyring work."
.. the way I read that is, ..
"Sorry, it turns out that even though we know that 'an application'
wants to gain access to the keyring, it's too hawrd to figure out how to
track that. So, we're putting this off. Indefinitely."
Open source developers. Gotta love 'em. (Yes this is a snide remark. I'm
embarrassed for these people. A desktop OS exists FOR A USER. So if a
security message cannot be properly constructing its message because to
properly construct its message is too hawrd, the message should not be
shown. Redesign the keyring feature or drop the feature.)
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1293790
Title:
"An application wants access to the keyring" (*which* application is
not specified)
Status in “gnome-keyring” package in Ubuntu:
New
Bug description:
I have Ubuntu 13.10 Desktop installed. I am being prompted with this
message: "Title: 'Unlock Keyring' - An application wants access to the
keyring 'default', but it is locked. Password? [____]" Note that in
this case there is no "Details >" expansion control, no "reveal more",
no button to "view details" etc.
This is not an unfamiliar message, similar concepts exist for both
Windows and Mac, and the behavior derives from earlier forms of Linux.
The idea of a keyring specifically is something I used on the Mac.
I have some beef with this message in Ubuntu's form, however. What
application is requesting this? Accessing a keyring with a password is
asking for a Master password, one password to rule them all. One
cannot, and should not, just hand out this master password to any
application. So what application wants access to the keyring??
IMO this failure to disclose who is asking for the master password is
critically bad security.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1293790/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
