After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 331910 - Gossip stores passwords on clear text form
Gossip stores passwords on clear text form
Status: RESOLVED FIXED
Product: gossip
Classification: Deprecated
Component: General
0.9
Other Linux
: Normal critical
: ---
Assigned To: Gossip Maintainers
Gossip Maintainers
Depends on:
Blocks:
 
 
Reported: 2006-02-20 16:45 UTC by Javier F. Serrador
Modified: 2006-05-31 17:45 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Javier F. Serrador 2006-02-20 16:45:29 UTC 
Gossip stores passwords on clear text form inside the directory. It should use gnome-keyring to store this information.
Comment 1 Martyn Russell 2006-02-20 16:52:39 UTC 
This is a really good idea I think. 

I haven't looked into how easy this would be, but think it would be quite good to have. The only concern I do have, is we have been moving slowly to not depending on Gnome, so it would probably be something we use or don't (like Galago or DBUS at the moment).

Bare in mind too, that the password has ALWAYS been in clear text.
Comment 2 Richard Hult 2006-02-27 16:32:49 UTC 
We should set the permissions to only readable by owner for now at least.
Comment 3 Ross Burton 2006-03-06 11:08:12 UTC 
Gossip used to store passwords in ~/.gnome2_private/, which was a low-cost solution.

(this has been filed in Debian as http://bugs.debian.org/355541)
Comment 4 Richard Hult 2006-03-18 08:19:37 UTC 
Fixed the permissions now, feel free to open a new bug for the keyring feature, preferrably with a patch attached ;)
Comment 5 Elijah Newren 2006-05-31 17:45:50 UTC 
Bug 343513 appears to be such a bug opened for storing passwords using gnome-keyring.