https://bugzilla.novell.com/show_bug.cgi?id=732740 https://bugzilla.novell.com/show_bug.cgi?id=732740#c0 Summary: ssh stores password permanently by default under GNOME Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: GNOME AssignedTo: bnc-team-gnome@forge.provo.novell.com ReportedBy: aj@suse.com QAContact: qa@suse.de CC: security-team@suse.de Found By: Product Management Blocker: --- From https://plus.google.com/u/0/116897159250746362191/posts/34EeVTd6D47 "my biggest concern right now is the ssh-agent dialog. Every time I start an ssh connection the agent defaults to simply remember the passphrase permanently. That is not a smart idea as there are known attacks on the agent. With other similar dialogs (like unlocking your keyring) once you switch to "remember for 1 minute" that's the default the next time you use it. Not so with ssh passphrases." "Gnome - so no, I'm not sure it's the agent. A quick ps shows neither the agent nor a seahorse process... :-(" -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.