Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a Fedora 15 laptop with the root and home partitions encrypted using LUKS. When it boots I have to enter a pass phrase to unlock the master key, so I have it configured to automatically log me in to my account. However, GnomeKeyring remains locked, so I have to enter another pass phrase for that. This is unpleasant and completely pointless since the entire disk is encrypted.

I've not been able to find a way to configure GnomeKeyring to store its pass phrases without encryption. For example, I was not able to find an answer here:

http://library.gnome.org/users/seahorse-plugins/stable/index.html.en

Is there a solution? If not, is there a mailing list where it would be appropriate to plead my case?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

Set an empty password for the keyring, it will not be encrypted (a dialog even warns you about that).

share|improve this answer
    
Edit: I think having an encrypted keyring is not as you said, completely pointless, even on a fully encrypted system partition. What about (local or remote) exploits that would allow to extract the keyring file? That does not even require root privileges... But indeed, in Gnome the keyring seems to have no timeout, and stays practically unlocked all the time, so that is probably not really more secure –  nodiscc Jun 26 '11 at 23:26
    
This suggestion solved the problem, so thank you. Because Gnome 3 is relatively new I had to hunt a bit to find out how to get it done: go to Activites, click on Applications, scroll to Passwords and Encryption Keys (clicking Accessories may speed this up), right click on Passwords: login and choose Change Password. –  antimeme Jun 28 '11 at 17:44

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.