Arch Linux

tethys

Member

Registered: 2019-08-13

Posts: 175

[SOLVED] Question about Gnome Keyring

Hello, I have two questions about the Gnome Keyring.

Could a malicious application, requesting access to the Gnome Keyring, read passwords stored by other applications in it? And if not, what is the mechanism that prevents this?

Last edited by tethys (2023-04-11 15:20:12)

Shyne

Member

Registered: 2012-04-09

Posts: 7

Re: [SOLVED] Question about Gnome Keyring

According to https://wiki.gnome.org/Projects/GnomeKe … ecurityFAQ

Can one application see another application's secrets?
Any application that executes with the same user's privileges can get access to any of the user's keyrings, and thus, can read secrets stored in any that are unlocked.

tethys

Member

Registered: 2019-08-13

Posts: 175

Re: [SOLVED] Question about Gnome Keyring

Thank you Shyne, this answers my questions!

3beb6e7c46a615a

Member

Registered: 2021-03-27

Posts: 165

Re: [SOLVED] Question about Gnome Keyring

It can because there's no mechanism which can prevent unsandboxed applications from accessing any data of the user account it's running under.  There's not even a protected concept of application identity without a sandbox.

Flatpak prohibits direct access to the keyring for sandboxed applications, and effectively creates a per-application keyring which isolates application secrets from other applications. But again, flatpak can also not protect these secrets against malicious unsandboxed processes.