How to use gpg-agent
    Ben Scott 
    dragonhawk at gmail.com
       
    Wed May  6 13:42:33 EDT 2009
    
    
  
On Wed, May 6, 2009 at 12:54 PM, Coleman Kane <ckane at colemankane.org> wrote:
> Many of the key agent programs under Linux (such as seahorse) make use
> of the mlock() call and ...
  So what?
  If one is feeding the passphrase to the agent automatically, then
the passphrase is in cleartext in a file somewhere, so if someone has
enough access to your system to grovel the remnants of swap you've
pretty much lost the same anyway.  Probably made it a lot easier,
since it's all scripted and in nice neat files, rather than in the big
unstructured blob the page file is.
-- Ben
    
    
More information about the gnhlug-discuss
mailing list