I would say this is not a problem. It is up to you not to leave keyrings
with confidental data unlocked when you grant someone to use your
console. He can suck data from the keyring anyways, even without the
keyring manager -- that's the purpose of keyring manager. (He can look
into your mail client's memory if you keep it running, etc.).

That's the basic principle:
*Never* let anyone who you do not trust use your desktop. Log off or
lock screen when you leave the terminal.

-- 
Lubomir Kundrak (Red Hat Security Response Team)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to