Hi,
Any ideas on an api to store password in an encrypted manner ?
The .gnome2/ tree is (as far as I understand) outdated since gconf is being
used.
I would prefer those password to be stored encrypted by linphone itself, since
the linphone engine is independant from gnome/kde or whatever.
Hi,
Simon Morlat wrote:
Any ideas on an api to store password in an encrypted manner ?
The .gnome2/ tree is (as far as I understand) outdated since gconf is being
used.
I would prefer those password to be stored encrypted by linphone itself, since
the linphone engine is independant from
Package: linphone
Version: 1.2.0-3
Severity: grave
Tags: security
Justification: user security hole
The accounts information, including CLEAR-TEXT passwords, is stored in
$HOME/.gnome2/linphone, which is by default world-readable. It should
be in $HOME/.gnome2_private/linphone (or any other path
Lionel Elie Mamane wrote:
The accounts information, including CLEAR-TEXT passwords, is stored in
$HOME/.gnome2/linphone, which is by default world-readable. It should
be in $HOME/.gnome2_private/linphone (or any other path below
$HOME/.gnome2_private/), where it will be safe, since
4 matches
Mail list logo