Bug#539727: too easy to confirm without knowledge

2009-08-11 Thread Dafydd Harries 
Ar 03/08/2009 am 11:43, ysgrifennodd martin f krafft:
> Package: gtk-led-askpass
> Version: 0.10-2
> Severity: normal
> 
> If I use gtk-led-askpass as SSH_ASKPASS programme and told the
> ssh-agent to require confirmations for an identity (ssh-add -c),
> gtk-led-askpass pops up and a simple enter or space press will give
> confirmation. SInce the window is captive, this can happen
> inadvertedly. It might make sense to default to "cancel" for
> confirmation dialogs.

I'm not sure I understand how these confirmation dialogs are supposed to work.
I tried running ssh-add with -c, but the gtk-led-askpass invocation seems
identical. Do yo know how it can tell whether it's a confirmation dialog or
not? x11-ssh-askpass seems to show the same UI in either case.

Daf



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#539727: too easy to confirm without knowledge

2009-08-03 Thread martin f krafft 
Package: gtk-led-askpass
Version: 0.10-2
Severity: normal

If I use gtk-led-askpass as SSH_ASKPASS programme and told the
ssh-agent to require confirmations for an identity (ssh-add -c),
gtk-led-askpass pops up and a simple enter or space press will give
confirmation. SInce the window is captive, this can happen
inadvertedly. It might make sense to default to "cancel" for
confirmation dialogs.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31-rc3-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gtk-led-askpass depends on:
ii  libatk1.0-0   1.26.0-1   The ATK accessibility toolkit
ii  libc6 2.9-21 GNU C Library: Shared libraries
ii  libcairo2 1.8.8-2The Cairo 2D vector graphics libra
ii  libfontconfig12.6.0-4generic font configuration library
ii  libglib2.0-0  2.20.4-1   The GLib library of C routines
ii  libgtk2.0-0   2.16.4-1   The GTK+ graphical user interface 
ii  libpango1.0-0 1.24.4-1   Layout and rendering of internatio
ii  libx11-6  2:1.2.1-1  X11 client-side library
ii  libxcursor1   1:1.1.9-1  X cursor management library
ii  libxext6  2:1.0.4-1  X11 miscellaneous extension librar
ii  libxi62:1.2.1-2  X11 Input extension library
ii  libxinerama1  2:1.0.3-2  X11 Xinerama extension library
ii  libxrandr22:1.3.0-2  X11 RandR extension library
ii  libxrender1   1:0.9.4-2  X Rendering Extension client libra

gtk-led-askpass recommends no packages.

gtk-led-askpass suggests no packages.

-- no debconf information


-- 
 .''`.   martin f. krafft   Related projects:
: :'  :  proud Debian developer   http://debiansystem.info
`. `'`   http://people.debian.org/~madduckhttp://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)