Bug#361913: linphone: passwords stored world-readable

2006-04-21 Thread Simon Morlat
Hi, Any ideas on an api to store password in an encrypted manner ? The .gnome2/ tree is (as far as I understand) outdated since gconf is being used. I would prefer those password to be stored encrypted by linphone itself, since the linphone engine is independant from gnome/kde or whatever.

Bug#361913: linphone: passwords stored world-readable

2006-04-21 Thread Samuel Mimram
Hi, Simon Morlat wrote: Any ideas on an api to store password in an encrypted manner ? The .gnome2/ tree is (as far as I understand) outdated since gconf is being used. I would prefer those password to be stored encrypted by linphone itself, since the linphone engine is independant from

Bug#361913: linphone: passwords stored world-readable

2006-04-11 Thread Lionel Elie Mamane
Package: linphone Version: 1.2.0-3 Severity: grave Tags: security Justification: user security hole The accounts information, including CLEAR-TEXT passwords, is stored in $HOME/.gnome2/linphone, which is by default world-readable. It should be in $HOME/.gnome2_private/linphone (or any other path

Bug#361913: linphone: passwords stored world-readable

2006-04-11 Thread Samuel Mimram
Lionel Elie Mamane wrote: The accounts information, including CLEAR-TEXT passwords, is stored in $HOME/.gnome2/linphone, which is by default world-readable. It should be in $HOME/.gnome2_private/linphone (or any other path below $HOME/.gnome2_private/), where it will be safe, since