From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: David Kastrup Newsgroups: gmane.emacs.devel Subject: Re: Fix needed for communication with gpg-agent Date: Sun, 25 Feb 2007 21:22:37 +0100 Message-ID: <85odnixa0i.fsf@lola.goethe.zz> References: <87irdzs6pp.fsf@stupidchicken.com> <87fy91g1pl.fsf@catnip.gol.com> <87wt2dk2rv.fsf@stupidchicken.com> <873b4yt7xx.fsf@stupidchicken.com> <87ps82ukz8.fsf@wheatstone.g10code.de> <87slcynii0.fsf@stupidchicken.com> <87bqjivxrz.fsf@stupidchicken.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1172434997 1879 80.91.229.12 (25 Feb 2007 20:23:17 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sun, 25 Feb 2007 20:23:17 +0000 (UTC) Cc: rms@gnu.org, Sascha Wilde , Chong Yidong , ueno@unixuser.org, emacs-devel@gnu.org, wk@gnupg.org, miles@gnu.org To: Andreas Schwab Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Feb 25 21:23:10 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1HLPtl-00031A-2e for ged-emacs-devel@m.gmane.org; Sun, 25 Feb 2007 21:23:09 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HLPtk-0002GR-Kk for ged-emacs-devel@m.gmane.org; Sun, 25 Feb 2007 15:23:08 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HLPta-0002GM-4N for emacs-devel@gnu.org; Sun, 25 Feb 2007 15:22:58 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HLPtY-0002GA-JV for emacs-devel@gnu.org; Sun, 25 Feb 2007 15:22:57 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HLPtY-0002G7-DM for emacs-devel@gnu.org; Sun, 25 Feb 2007 15:22:56 -0500 Original-Received: from mail-in-09.arcor-online.net ([151.189.21.49]) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1HLPtS-0003nR-Cu; Sun, 25 Feb 2007 15:22:50 -0500 Original-Received: from mail-in-01-z2.arcor-online.net (mail-in-10-z2.arcor-online.net [151.189.8.27]) by mail-in-09.arcor-online.net (Postfix) with ESMTP id 907BE302A58; Sun, 25 Feb 2007 21:22:43 +0100 (CET) Original-Received: from mail-in-08.arcor-online.net (mail-in-08.arcor-online.net [151.189.21.48]) by mail-in-01-z2.arcor-online.net (Postfix) with ESMTP id 80CA923D3A5; Sun, 25 Feb 2007 21:22:43 +0100 (CET) Original-Received: from lola.goethe.zz (dslb-084-061-061-024.pools.arcor-ip.net [84.61.61.24]) by mail-in-08.arcor-online.net (Postfix) with ESMTP id 5926B2267AF; Sun, 25 Feb 2007 21:22:42 +0100 (CET) Original-Received: by lola.goethe.zz (Postfix, from userid 1002) id 7D2AE1D17413; Sun, 25 Feb 2007 21:22:37 +0100 (CET) In-Reply-To: (Andreas Schwab's message of "Sun\, 25 Feb 2007 20\:50\:22 +0100") User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.94 (gnu/linux) X-detected-kernel: Linux 2.4-2.6 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:66804 Archived-At: Andreas Schwab writes: > Chong Yidong writes: > >> This is arguably a security hole because it makes it too easy for >> root to find people's passwords (granted, root can easily steal >> passwords anyway, but it arguably shouldn't be *this* easy.) > > If you are root you can read every process's memory, no matter where > it is stored. The danger is not as much root on an active system. The danger is that the passwords will be stored on disk where they will stay semi-permanently, even if the disk gets sold, imaged, or stolen. -- David Kastrup, Kriemhildstr. 15, 44793 Bochum