LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-21-2019, 01:29 PM   #1
lostinxlation
LQ Newbie
 
Registered: Dec 2009
Location: San Jose
Distribution: Slackware, Debian
Posts: 22

Rep: Reputation: 1
Keyrings... what's in ~/.local/share/keyrings/* ?


Hi,
Could anyone tell me what ~/.local/share/keyrings/{login.keyring, user.keyring} contains ?
Do they have the keyring password, or credentials to websites for auto-login or something else ?

I'm not comfortable to keep the credentials in the system even if they are encrypted and trying to get rid of them as well as disabling the auto-login feature.

Would appreciate your inputs.
 
Old 04-22-2019, 03:26 AM   #2
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,687

Rep: Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274
I don't really understand what do you want to try.
Actually you can rename those files (directories) and check what will happen (what will not work any more) and you will definitely see.
 
Old 04-22-2019, 09:51 AM   #3
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,708

Rep: Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210
What's in the files? On my desktop:
Code:
$ more  .local/share/keyrings/*
::::::::::::::
.local/share/keyrings/login.keyring
::::::::::::::
GnomeKeyring


::::::::::::::
.local/share/keyrings/user.keystore
::::::::::::::
Gnome Keyring Store 2
...so, nothing...
 
Old 04-22-2019, 12:06 PM   #4
verndog
Member
 
Registered: Oct 2007
Posts: 277

Rep: Reputation: 66
I use autologin. With user login I don't think much is displayed in keyring. But when I install Chrome, all the sites I visit and a log of detail is recorded. I use to be able to add: --password-store=basic to google-chrome.desktop and I wouldn't be bothered with keyring. I still can somewhat, but not on Ubuntu's favorites. I deal with it another way.
 
Old 04-22-2019, 05:00 PM   #5
lostinxlation
LQ Newbie
 
Registered: Dec 2009
Location: San Jose
Distribution: Slackware, Debian
Posts: 22

Original Poster
Rep: Reputation: 1
Basically, I want to delete files which contain credentials used for auto-login(and permanently disable auto-login). I thought those files under ~/.local/share/keyrings might be the ones, but since I wasn't sure, I asked this question.

The files there in my system have some binary data in them.

if you know where the auto-login credentials are stored, please let me know.

Last edited by lostinxlation; 04-22-2019 at 05:04 PM.
 
Old 04-22-2019, 05:14 PM   #6
hydrurga
LQ Guru
 
Registered: Nov 2008
Location: Pictland
Distribution: Linux Mint 21 MATE
Posts: 8,048
Blog Entries: 5

Rep: Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925
Which distro and version are you running?

You do realise that your login credentials are the same that you use (on systems that use sudo) to sudo to root? I imagine that the display manager takes the credentials from /etc/shadow - by all means turn off auto login, but don't delete your credentials.
 
Old 04-22-2019, 09:04 PM   #7
lostinxlation
LQ Newbie
 
Registered: Dec 2009
Location: San Jose
Distribution: Slackware, Debian
Posts: 22

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by hydrurga View Post
Which distro and version are you running?

You do realise that your login credentials are the same that you use (on systems that use sudo) to sudo to root? I imagine that the display manager takes the credentials from /etc/shadow - by all means turn off auto login, but don't delete your credentials.
I'm running Debian 9.8.

There is a good chance that I completely misunderstand autologin via keyring. Quickly reading some descriptions about keyring, I somehow came to my understanding that the keyring has credentials for websites such as Google account or some other websites and that lead me to think there must be a file which keeps the autologin (encrypted) credentials in it. Isn't it correct ?

/etc/shadow or /etc/passwd contains credentials to log into the system(linux). Or does it have credentials to auto-login to websites too ?
 
Old 04-23-2019, 12:26 AM   #8
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,687

Rep: Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274Reputation: 7274
/etc/password does not contain log info for websites.
 
Old 04-26-2019, 11:10 AM   #9
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
you can simply uninstall all that keyring stuff.
might cause dependency issues with chrom/e/ium iirc.

and don't tranlate my light dismissal of keyrings to other, crucial packages.

and no, autologin is a different thing and you do not want to mess around in /etc.

understanding all this isn't easy (i don't fully understand it either) - maybe you should do some web searches and just learn.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Evolution - changing account information, imports, and "keyrings" diacad Linux - Newbie 6 01-22-2020 03:52 AM
Keyrings Unbuntu hardy metallica1973 Ubuntu 3 09-01-2012 12:05 AM
How to use Gnome Keyrings in C Application? KillerCode Programming 0 10-31-2011 01:39 PM
keyrings? mira.mikes Linux - Newbie 4 01-06-2009 06:07 PM
Keyrings - a place to store passwords for many systems? Chris Sharman Linux - Security 2 05-03-2008 01:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration