Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'locked keychain' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
locked keychain
Authored by: uurf on Apr 15, '02 12:09:22PM

The above dexribed "security flaw" scenario only occurs if the user has explicity selected "always allow" in response to the Keychain Access dialog. (when I select an item in an unlocked keychain listing, then select show inf, then select view password, I receive the "Confirm Access to Keychain" dialog with the options "Deny", "Allow Once", and "Always Allow").

The account preferences on each user's keychain also allow me to specify whether the keychain locks during a specified amount of inactivity, and whether or not to lock if the system sleeps.



[ Reply to This | # ]
locked keychain
Authored by: ashill on Apr 15, '02 01:05:04PM

Choosing 'Deny' does not permanently deny access to that password; it simply denies access that one time. If you click deny once, then try to view the password again, you will be presented with the same dialog; click allow, and you're in.

-Alex Hill



[ Reply to This | # ]