*** This bug is a security vulnerability ***
Public security bug reported:
Binary package hint: gnome-keyring
When gnome-keyring prompts for a password, it does not keep its focus,
but DOES remain on top.
This gives the impression that the password can be entered.
However, when a user enters the password, it is entered into whatever
window actually has the focus. In my case, this is normally a text
editor, and so the password is displayed rather than hidden. Obviously,
this is a security issue in a public environment.
This behaviour does NOT occur with other programs that require password
entry. gksudo (or gksu), for example, behaves in the way I would expect,
taking the focus, and preventing other windows from having that focus.
I am running Ubuntu 9.10 karmic, using fluxbox as the window manager,
although I do not believe that this is a fluxbox issue, as it appears to
be caused by the order in which the windows open.
The version of gnome-keyring I have installed is: 2.28.1-0ubuntu1
** Affects: gnome-keyring (Ubuntu)
Importance: Undecided
Status: New
** Tags: gnome keyring
** Visibility changed to: Public
--
gnome keyring loses focus upon startup
https://bugs.launchpad.net/bugs/568921
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
