[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: ssh private key password



On Fri, Jan 09, 2009 at 10:19:12AM -0600, Callum Lerwick wrote:
> http://man.root.cz/1/gnome-ssh-askpass/
> 
> gnome-ssh-askpass will lock keyboard focus to its window, preventing
> focus stealing and key logging attacks from other X clients. It also
> aborts if it fails to gain a lock on the keyboard. Try starting two
> copies of gnome-ssh-askpass at the same time, and see what happens:
> 
> $ /usr/libexec/openssh/gnome-ssh-askpass&/usr/libexec/openssh/gnome-ssh-askpass
> 
> Seems to me it's much preferable to use gnome-ssh-askpass if you're in
> X, even in xterms.

Note that the dialog in this case comes from gnome-keyring, and is not
actually gnome-ssh-askpass.  You can tell because gnome-ssh-askpass
doesn't offer to store things in your keyring, and it isn't used when
the process has access to a terminal device which it can use to prompt
the user.

Nalin


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]