Hi Martin,

On Thu, Aug 16, 2012 at 09:01:16PM +0200, martin f krafft wrote:
> also sprach Patrick Ben Koetter <p...@state-of-mind.de> [2012.08.16.2044 
> +0200]:
> >         Putting passwords in configs isn't something I like, so
> >         I pull them from the Gnome keyring:
> 
> Not a bad idea, but now an attacker with access to the filesystem
> doesn't have to run 'cat ~/.muttrc' but 'gnome-keyring-query get mutt' 
> instead.

isn't one of the purposes of gnome-keyring daemon to store the passwords
encrypted on disk while they are unused and unlock that keyring once the
user want's to do so?

Btw: Does anyone have a cool setup that is less dependent on gnome? I'm
using awesome for a while now and want to avoid more dependancies on gnome.

Regards, Andre


-- 
Andre Klärner

Telefon: 0351/79666546
Fax:     0351/79688547
Mobil:   0172/9838653

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to