Bug#361913: linphone: passwords stored world-readable
Samuel Mimram
samuel.mimram at ens-lyon.org
Tue Apr 11 23:11:06 UTC 2006
Lionel Elie Mamane wrote:
> The accounts information, including CLEAR-TEXT passwords, is stored in
> $HOME/.gnome2/linphone, which is by default world-readable. It should
> be in $HOME/.gnome2_private/linphone (or any other path below
> $HOME/.gnome2_private/), where it will be safe, since
> $HOME/.gnome2_private/ is mode 0700.
Argh. Thanks for noticing this. I'll try to come up with a patch soon.
Cheersn
Samuel.
More information about the Pkg-voip-maintainers
mailing list