Why does Evolution source registry periodically search Secret Service?
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2003 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2002 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2001 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2000 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1999 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1998 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1997 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1996 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1995 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1994 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1993 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1992 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1991 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1990 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1989 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1988 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1987 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1986 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1985 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1984 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1983 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1982 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1981 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 1980 -----
- December
- November
Hello,
I have KeePassXC set up as the Secret Service provider on my system. I
have it configured to prompt me for the database password if a program
tries to search Secret Service while the database is locked, and I've
noticed that I occasionally get prompted for the password while not
doing anything that should require Secret Service. I found this line in
the logs that seems to indicate that a service called
evolution-source-registry attempted to search Secret Service:
Apr 15 19:43:15 fedora evolution-sourc[2546]:
secret_monitor_scan_secrets_thread: Timeout was reached
Is there a way to disable this? I have no GNOME Online Accounts set up.
I tried stopping this service but that breaks GNOME Calendar.
Best regards,
Alexander Zhang
On Fri, 2022-04-15 at 20:25 -0700, Alexander Zhang wrote:
I found this line in the logs that seems to indicate that a service
called evolution-source-registry attempted to search Secret Service:
Apr 15 19:43:15 fedora evolution-sourc[2546]:
secret_monitor_scan_secrets_thread: Timeout was reached
Is there a way to disable this? I have no GNOME Online Accounts set
up. I tried stopping this service but that breaks GNOME Calendar.
I see you posed from Thunderbird, but do you use Evolution, at all?
Email, calendar, contacts? If so it'll be trying to log in to a
service, wanting its credentials.
Other things have come to use parts of evolution as their libraries.
For instance, if I try to remove evolution-data-server, it wants to
remove gnome-shell, gnome-contacts, and folks, as well.
If you look in gnome-session-properties (I'm doing this from old info,
it may have changed since then), you'll see applications that will be
started up when you log in. There could be something evolution related
in there that you aren't actually using.
I have no gnome-online accounts either, but that doesn't mean its not
going to be interacting with local accounts from time to time.
--
uname -rsvp
Linux 3.10.0-1160.62.1.el7.x86_64 #1 SMP Tue Apr 5 16:57:59 UTC 2022 x86_64
Boilerplate: All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
I see you posed from Thunderbird, but do you use Evolution, at all?
Email, calendar, contacts? If so it'll be trying to log in to a
service, wanting its credentials.
Other things have come to use parts of evolution as their libraries.
For instance, if I try to remove evolution-data-server, it wants to
remove gnome-shell, gnome-contacts, and folks, as well.
If you look in gnome-session-properties (I'm doing this from old info,
it may have changed since then), you'll see applications that will be
started up when you log in. There could be something evolution related
in there that you aren't actually using.
I don't use Evolution, but like you said other things including GNOME
Calendar use evolution-data-server. I can make KeePassXC not prompt me
when a program tries to search, but I would have to remember to unlock
the database every time before doing anything that needs it. I don't
have any auto-started programs that might need Secret Service other than
Thunderbird, and last time I checked Thunderbird doesn't support Secret
Service.
Alex
On Sun, 2022-04-17 at 22:47 -0700, Alexander Zhang wrote:
I don't use Evolution, but like you said other things including
GNOME Calendar use evolution-data-server. I can make KeePassXC not
prompt me when a program tries to search, but I would have to
remember to unlock the database every time before doing anything that
needs it. I don't have any auto-started programs that might need
Secret Service other than Thunderbird, and last time I checked
Thunderbird doesn't support Secret Service.
Can you whitelist certain situations? (Combinations of Gnome calendar
and Evolution data server, rather than just open slather for
Evolution's bits?)
My following of using Evolution had been that when you log into your
desktop, that opened up other things there and then. I don't know
whether Evolution's various bits needed authenticating again, later on.
--
uname -rsvp
Linux 3.10.0-1160.62.1.el7.x86_64 #1 SMP Tue Apr 5 16:57:59 UTC 2022 x86_64
Boilerplate: All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
On Mon, 2022-04-18 at 15:42 +0930, Tim via users wrote:
On Sun, 2022-04-17 at 22:47 -0700, Alexander Zhang wrote:
> I don't use Evolution, but like you said other things including
> GNOME Calendar use evolution-data-server. I can make KeePassXC not
> prompt me when a program tries to search, but I would have to
> remember to unlock the database every time before doing anything
> that
> needs it. I don't have any auto-started programs that might need
> Secret Service other than Thunderbird, and last time I checked
> Thunderbird doesn't support Secret Service.
Can you whitelist certain situations? (Combinations of Gnome
calendar
and Evolution data server, rather than just open slather for
Evolution's bits?)
My following of using Evolution had been that when you log into your
desktop, that opened up other things there and then. I don't know
whether Evolution's various bits needed authenticating again, later
on.
Evolution relies on gnome-keyring for authentication. If you set up the
keyring to open with your login password, that will cover anything Evo
needs. You can of course have separate keys for different apps (using
seahorse), but that will require more interaction when using those
apps.
poc
Evolution relies on gnome-keyring for authentication. If you set up
the
keyring to open with your login password, that will cover anything Evo
needs. You can of course have separate keys for different apps (using
seahorse), but that will require more interaction when using those
apps.
I've replaced GNOME Keyring with KeePassXC so that I can store
everything in one password manager. The issue is that the Secret Service
protocol is designed for password managers like GNOME Keyring that store
metadata unencrypted, so the provider is expected to allow searches
without unlocking the database. KeePassXC encrypts everything, so it has
to prompt me to unlock the database when a program does a search. See
https://github.com/keepassxreboot/keepassxc/issues/4443.
Alex
749
days inactive
751
days old
5 comments
3 participants
tags (0)
participants (3)
-
Alexander Zhang -
Patrick O'Callaghan -
Tim