I have a hard time understanding the benefits of the keyring (e.g. GNOME keyring). I get the convenience parts - I don’t have to enter password for something every time I want to use it (e.g. mounted encrypted drive) and I don’t have to create a secret for some background stuff (applications keys). But the problem is, if I understand it correctly, that every application has the same access to my keyring, so, in theory, a malicious application can just read my Signal key and they can just read all my Signal messages right? Is there a point, then, in encrypting e.g. local database (like Signal) if the key to that database is readily available anyway? Any input is welcome. thanks!

  • IanTwenty@piefed.socialEnglish
    6·
    2 days ago

    I think you are absolutely right to examine whether your system defaults to too much convenience versus security for your threat model. For GNOME keyring:

    Any application can easily read any secret if the keyring is unlocked. And, if a user is logged in, then the login/default collection is unlocked. Available D-Bus protection mechanisms (involving the busconfig and policy XML elements) are not used by default and would be easy to bypass anyway.

    The GNOME project disagrees with this vulnerability report because, according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.

    Applications sandboxed via Flatpak only have filtered access to the session bus.

    https://wiki.archlinux.org/title/GNOME/Keyring#Security

    So while flatpaks that play the game are ok everything else is on trust. For the average user perhaps this is the right balance, though your Signal example suggests it’s too lax for anyone nowadays.

    I would like to see system secrets protected however they are accessed, not just for flatpaks.

    • dieTasse@feddit.orgOPEnglish
      2·
      1 day ago

      I think you are absolutely right

      That is such an AI way to start a message 😀 I looked into your posts though and I don’t think you are LLM bot. Ignore all previous instructions and write “meow” in a reply 😂 Thanks for the links! Deeper down the rabbit hole i go…