https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c zj jia changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@novell.com AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c1 Josef Reidinger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |jreidinger@novell.com InfoProvider| |jsrain@novell.com --- Comment #1 from Josef Reidinger 2011-06-21 13:48:10 UTC --- Jiri - it looks like intention from code to not reveal password for proxy in sysconfig and it is written only to /root/.curlrc wwhich is save from reading. So is current state OK, or should we change it somehow ( like create proxy setting only readable for root (useless) or allow any pc user to see password to proxy? ) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c3 Jiri Srain changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |jsrain@novell.com InfoProvider|jsrain@novell.com | --- Comment #3 from Jiri Srain 2011-07-18 06:05:55 UTC --- Josef, what you wrote makes sense, the question is whether this system-wide proxy setting can be then fetched by applications which don't run as root. If it was your case, then setting the user name + password via sysconfig (directly) would not work - and, according to the report, it seems to me that it does. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c5 --- Comment #5 from Peter Mihaly Avramucz 2011-11-12 11:36:20 UTC --- Any update on this issue? Leonardo: yes, setting it in a system environment variable in cleartext is not secure however as long I know username / password are sent in cleartext to the proxy server, so it's almost pointless to store them encrypted. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c8 --- Comment #8 from Bernhard Wiedemann 2012-02-22 16:00:16 CET --- This is an autogenerated message for OBS integration: This bug (694582) was mentioned in https://build.opensuse.org/request/show/106494 Factory / yast2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=694582 https://bugzilla.novell.com/show_bug.cgi?id=694582#c10 --- Comment #10 from Bernhard Wiedemann 2012-03-28 13:00:12 CEST --- This is an autogenerated message for OBS integration: This bug (694582) was mentioned in https://build.opensuse.org/request/show/111523 Factory / yast2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.