summaryrefslogtreecommitdiff
path: root/doc/bugs/The_restricted_ssh_key_pair_makes_password_login___40__nearly__41___impossible/comment_16_cca4abde86a8be5e2919c4738f5bdd0c._comment
blob: 2260917b30c9f051e685aa3913bb507cf3adcc71 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
[[!comment format=mdwn
 username="http://joeyh.name/"
 nickname="joey"
 subject="comment 16"
 date="2013-04-14T19:04:11Z"
 content="""
Are you guys running Gnome? Using gnome-keyring?

I found the following highly suspicious code inside gnome-keyring:

[[!format C \"\"\"
        if (!self->directory)
                self->directory = g_strdup (\"~/.ssh\");
        self->tracker = gkm_file_tracker_new (self->directory, \"*.pub\", NULL);
\"\"\"]]

This seems to load *all* keys, as described. Not keys in subdirectories of ~/.ssh/ either.
"""]]