[Pkg-bazaar-maint] Bug#565714: /usr/bin/bzr-notify: I was bushwacked by bzr-notify

[Greg Kochanski]

Package: bzr-gtk
Version: 0.97.0-1
Severity: normal
File: /usr/bin/bzr-notify

When I logged in (via gdm into a gnome desktop), I was confronted by a
demand for my password, from a small window produced by bzr-notify.
This window did not say why it wanted my password, or even what
program generated it.   Now, I've been brought up well, and I'm not
the kind of guy who goes around typing passwords into just any window
that wanders by.    But, the window captured all keyboard input and
would not go away.

For instance, I could use my mouse to create a terminal window,
but it was never selected, and no typing appeared in it.  Clicking
on the [x] box of the rogue window made it disappear for a fraction
of a second, but it came right back, at least 10 times.  I was
forced to use ctrl-alt-f2 to get a proper console so I could
use ps and kill.

Bad form.   This is Linux: we don't want to train impressionable
novices that they should type their passwords into a box,
just to make it go away.   We don't want password boxes without
explanations.   We don't want windows that appear and hijack the
keyboard, not unless you specifically ask for them.  


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-proposed-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages bzr-gtk depends on:
ii  bzr                          2.0.3-1     easy to use distributed version co
ii  python                       2.5.4-5     An interactive high-level object-o
ii  python-central               0.6.14+nmu2 register and build utility for Pyt
ii  python-glade2                2.16.0-1    GTK+ bindings: Glade support
ii  python-gtk2                  2.16.0-1    Python bindings for the GTK+ widge
ii  python-notify                0.1.1-2+b1  Python bindings for libnotify

Versions of packages bzr-gtk recommends:
pn  bzr-dbus                      <none>     (no description available)
ii  python-cairo                  1.8.6-1    Python bindings for the Cairo vect
ii  python-gnome2-desktop         2.26.0-1   Python bindings for the GNOME desk
ii  python-gnomekeyring           2.28.0-5   Python bindings for the GNOME keyr
ii  python-gtksourceview2         2.8.0-1    Python bindings for the GtkSourceV
ii  python-nautilus               0.5.1-2    Python binding for Nautilus compon
ii  seahorse                      2.28.1-1   GNOME front end for GnuPG

Versions of packages bzr-gtk suggests:
pn  bzr-avahi                  <none>        (no description available)
ii  bzr-loom                   1.4.0~bzr97-1 Focused patch plugin support for B
ii  bzr-search                 1.7.0~bzr77-1 search plugin for Bazaar

-- no debconf information