Re: [eclipse-dev] .keyring moved

[Pascal Rapicault <Pascal_Rapicault@xxxxxxxxxx>]

The .config area is written in the install
folder when it is writtable, otherwise it is being written in the user.home.
The .keyring along with some other files
has been put in the .config area in order to keep them grouped.
I annotated the bug 50006 with your
suggestion to always put the .keyring in the user.home.

PaScaL

"Bob Foster" <bob@xxxxxxxxxxxx> Sent by: eclipse-dev-admin@xxxxxxxxxxx 01/30/2004 05:38 AM Please respond to eclipse-dev

To:        <eclipse-dev@xxxxxxxxxxx>         cc:                 Subject:        Re: [eclipse-dev] .keyring moved

Is the .config folder still in the install folder?
Where does it go when you
can't write in the install folder?

This may be a naive question, but why isn't the keyring file put in
user.dir?

Bob Foster

----- Original Message ----- 
From: "Jeff McAffer" <Jeff_McAffer@xxxxxxxxxx>
To: <eclipse-dev@xxxxxxxxxxx>
Sent: Thursday, January 29, 2004 10:08 AM
Subject: Re: [eclipse-dev] .keyring moved


> As mentioned in bug https://bugs.eclipse.org/bugs/show_bug.cgi?id=50820,
> this addresses a long standing security issue where people exchange
> workspaces and unknowingly pass along their passwords.
>
> I understand your points but observe that:
> - the vast majority of Eclipse users change workspaces more often
than
> they change builds.
> - having to delete the .config dir is an exception not a design point.
 As
> the bugs are fixed and more cases are handled, this practice will
not be
> needed/used
>
> Given the security issues and the above points, we feel this is the
best
> approach.  Please annotate the above bug if you have counter
> arguments/scenarios.
>
> Jeff
>
>
>
>
> Pascal Rapicault/Ottawa/IBM@IBMCA
> Sent by: eclipse-dev-admin@xxxxxxxxxxx
> 01/29/2004 09:42 AM
> Please respond to
> eclipse-dev
>
>
> To
> eclipse-dev@xxxxxxxxxxx
> cc
> eclipse-dev@xxxxxxxxxxx, eclipse-dev-admin@xxxxxxxxxxx
> Subject
> Re: [eclipse-dev] .keyring moved
>
>
>
>
>
>
>
> That's why you can specify -keyring option.
>
> P.
>
>
>
>
> Daniel Megert <daniel_megert@xxxxxxxxxx>
> Sent by: eclipse-dev-admin@xxxxxxxxxxx
> 01/29/2004 10:35 AM
> Please respond to eclipse-dev
>
>         To:        eclipse-dev@xxxxxxxxxxx
>         cc:
>         Subject:        Re:
[eclipse-dev] .keyring moved
>
>
>
>
>
>
>
> How about moving to a new build (which I do at least once a week)?
Will I
> now have to enter the passwords again each time?
> It also means each time when I have to delete the .config directory
(e.g.
> because I cannot startup after a crash), I will loose my passwords?
>
> Dani
>
>
>
>             Pascal Rapicault
>             <Pascal_Rapicault
>             @ca.ibm.com>    
                     
                    To
>             Sent by:      
           eclipse-dev@xxxxxxxxxxx
>             eclipse-dev-admin  
                     
                 cc
>             @eclipse.org
>                    
                     
                     
  Subject
>                    
                  [eclipse-dev]
.keyring moved
>             29.01.2004 16:17
>
>
>             Please respond to
>             eclipse-dev@eclip
>                  se.org
>
>
>
>
>
>
>
> Hello,
>
> As a consequence of the introduction of the support for running without
a
> workspace, and also
> to allow people to share workspaces without giving away their passwords,
> the .keyring file has been
> moved to the .config area. Consequently this provide password sharing
> across workspaces.
>
> What does this mean to you:
> - if you are opening an existing workspace with a new version of eclipse,
> you will be prompted for your passwords and a new .keyring file will
be
> created into your .config area
> - in self host mode you will have to re-enter you pwd every time because
> the .config area is recreated everytime by PDE.
>
> Note that you can still specify the -keyring option on the command
line.
>
>        PaScaL
>
> _______________________________________________
> eclipse-dev mailing list
> eclipse-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe
> from this list, visit
> http://dev.eclipse.org/mailman/listinfo/eclipse-dev
>
>

_______________________________________________
eclipse-dev mailing list
eclipse-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe
from this list, visit
http://dev.eclipse.org/mailman/listinfo/eclipse-dev