How to use gpg-agent

Ben Scott dragonhawk at gmail.com
Wed May 6 13:42:33 EDT 2009


On Wed, May 6, 2009 at 12:54 PM, Coleman Kane <ckane at colemankane.org> wrote:
> Many of the key agent programs under Linux (such as seahorse) make use
> of the mlock() call and ...

  So what?

  If one is feeding the passphrase to the agent automatically, then
the passphrase is in cleartext in a file somewhere, so if someone has
enough access to your system to grovel the remnants of swap you've
pretty much lost the same anyway.  Probably made it a lot easier,
since it's all scripted and in nice neat files, rather than in the big
unstructured blob the page file is.

-- Ben


More information about the gnhlug-discuss mailing list