*** This bug is a duplicate of bug 246185 ***
    https://bugs.launchpad.net/bugs/246185

Stimpy, I came to a different conclusion from the upstream bug report.

The problem isn't figuring out which _one_ application wants the key,
it's that the key will be available to _all_ the desktop applications.

Fixing this issue will take significant work -- switching to Mir or
Wayland, for a start -- and providing mandatory access control policies
for desktop applications.

The problem isn't just with the message presented to the user.

Thanks

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1293790

Title:
  "An application wants access to the keyring" (*which* application is
  not specified)

Status in “gnome-keyring” package in Ubuntu:
  New

Bug description:
  I have Ubuntu 13.10 Desktop installed. I am being prompted with this
  message: "Title: 'Unlock Keyring' - An application wants access to the
  keyring 'default', but it is locked. Password? [____]" Note that in
  this case there is no "Details >" expansion control, no "reveal more",
  no button to "view details" etc.

  This is not an unfamiliar message, similar concepts exist for both
  Windows and Mac, and the behavior derives from earlier forms of Linux.
  The idea of a keyring specifically is something I used on the Mac.

  I have some beef with this message in Ubuntu's form, however. What
  application is requesting this? Accessing a keyring with a password is
  asking for a Master password, one password to rule them all. One
  cannot, and should not, just hand out this master password to any
  application. So what application wants access to the keyring??

  IMO this failure to disclose who is asking for the master password is
  critically bad security.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1293790/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to