Bug#361913: linphone: passwords stored world-readable

Samuel Mimram samuel.mimram at ens-lyon.org
Tue Apr 11 23:11:06 UTC 2006


Lionel Elie Mamane wrote:
> The accounts information, including CLEAR-TEXT passwords, is stored in
> $HOME/.gnome2/linphone, which is by default world-readable. It should
> be in $HOME/.gnome2_private/linphone (or any other path below
> $HOME/.gnome2_private/), where it will be safe, since
> $HOME/.gnome2_private/ is mode 0700.

Argh. Thanks for noticing this. I'll try to come up with a patch soon.

Cheersn

Samuel.




More information about the Pkg-voip-maintainers mailing list