Passwords in the Password/Encryption Keys program

Question

I noticed that I have passwords in the Password/Encryption Keys program . It appears that anybody who walked up to my computer could go look at all my passwords without needing a master password. Did I do something wrong or is this the default behavior? And if so, why?

and what if i lock my password is it get locked till i log out or for every time when i have 2to see password then i have to unlock keyrings . if then so how i protect my passwords from other . and why it is done so

I this is bug . i want that I lock my all keyrings and when I try to open it promt me for password. — twister_void, Apr 01 '12 at 03:14

score 4 · Accepted Answer · edited Oct 13 '17 at 16:54

4

You can lock the passwords:

open seahorse
Right click on Passwords and choose lock

Always lock your Computer when leaving the Desk!

Seahorse is the tool to manage keys and passwords: to the seahorse manual

edited Oct 13 '17 at 16:54

Rick-777

508

answered Jan 25 '12 at 15:47

koni_raid

3,310

@konard thanks this is good help for me . But i want to know if i lock passwords and when i restart my computer then i have 2 lock again . and which condition its get unlocked – twister_void Jan 25 '12 at 16:06
see this for more infos: link – koni_raid Jan 25 '12 at 16:36
and more: https://wiki.gnome.org/Apps/Seahorse – Rick-777 Oct 13 '17 at 13:57

score 2 · Answer 2 · edited Apr 13 '17 at 12:23

2

This is actually a security bug with Seahorse, the tool that manages passwords. A bug report has already been filed both in Launchpad and GNOME bug tracker regarding this bug. You can also read up on the Ubuntu forums thread that was discussing this exact issue with Seahorse.

How do I subscribe to a bug?

edited Apr 13 '17 at 12:23

Community

1

answered Mar 28 '12 at 07:26

jokerdino

41,320

score 0 · Answer 3 · answered Apr 01 '12 at 02:56

This is my idea to solve the problem quoted from the forums;

he way I see it Ubuntu is almost there, seahorse does ask permission just no confirmation. And we do have the tools like gconf. And policykit, witch can handle non-root permissions and IMO is way under used.

Here's my idea, create a sane list of default apps that can access seahorse. The ability to change that list through gconf, and permission checks through policykit for unexpected apps, changing info or viewing passwords. And finally come up with a unified personal security policy for the desktop as a whole

is this idea is helpful – twister_void Apr 01 '12 at 02:59 — twister_void, Apr 01 '12 at 02:59

Passwords in the Password/Encryption Keys program

3 Answers3

Linked

Related