[Bug 1293790] Re: "An application wants access to the keyring" (*which* application is not specified)

[Sebastien Bacher]

*** This bug is a duplicate of bug 246185 ***
    https://bugs.launchpad.net/bugs/246185

** Package changed: update-manager (Ubuntu) => gnome-keyring (Ubuntu)

** This bug has been marked a duplicate of bug 246185
   "Unlock Private Key" dialog mysteriously refers to "an application"

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1293790

Title:
  "An application wants access to the keyring" (*which* application is
  not specified)

Status in “gnome-keyring” package in Ubuntu:
  New

Bug description:
  I have Ubuntu 13.10 Desktop installed. I am being prompted with this
  message: "Title: 'Unlock Keyring' - An application wants access to the
  keyring 'default', but it is locked. Password? [____]" Note that in
  this case there is no "Details >" expansion control, no "reveal more",
  no button to "view details" etc.

  This is not an unfamiliar message, similar concepts exist for both
  Windows and Mac, and the behavior derives from earlier forms of Linux.
  The idea of a keyring specifically is something I used on the Mac.

  I have some beef with this message in Ubuntu's form, however. What
  application is requesting this? Accessing a keyring with a password is
  asking for a Master password, one password to rule them all. One
  cannot, and should not, just hand out this master password to any
  application. So what application wants access to the keyring??

  IMO this failure to disclose who is asking for the master password is
  critically bad security.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1293790/+subscriptions