Keyring password (Re: Installation report for UNR 20090324 on Acer Aspire One)

[Kees Cook]

On Wed, Mar 25, 2009 at 02:12:44PM +0000, Matt Zimmerman wrote:
> Maybe we could create the keyring at install time when we have the password?

I think that's the right choice here.  I'm obviously biased towards
security, but without a keyring password, the contents of are sitting on
disk in the clear -- that's pretty nasty.  I'm of the opinion that
auto-login should not be allowed, but I realize I'm not going to see that
go away.  :)

-- 
Kees Cook
Ubuntu Security Team