Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KPXC doesn't honor ConfirmAccessItem in [FdoSecrets] when it cannot find the executable path #109

Closed
StayPirate opened this issue Mar 11, 2023 · 2 comments

Comments

@StayPirate
Copy link
Contributor

StayPirate commented Mar 11, 2023

The problem of fingerprinting short-live processes was lengthy discussed keepassxreboot/keepassxc#7571 and keepassxreboot/keepassxc#6458. The quickest workaround is to set ConfirmAccessItem=false under [FdoSecrets] to revert to 2.6.x behavior.

Flatpaked KPXC does not honor the ConfirmAccessItem option and keep showing the following dialog every time Nextcloud-client starts, even though I have ConfirmAccessItem=false

image

Please note that nextcloud-client is installed via Flatpak as well. I have no memories of this weird behavior in my previous setup where both KPXC and Nextcluoud-client where installed via the distro's packet manager.

@StayPirate StayPirate changed the title KPXC doesn't honor ConfirmAccessItem in [FdoSecrets] when doesn't find executable path KPXC doesn't honor ConfirmAccessItem in [FdoSecrets] when it cannot find the executable path Mar 11, 2023
@StayPirate
Copy link
Contributor Author

StayPirate commented Mar 11, 2023

My best guess is that KPXC has no visibility over the nextcloud binary because it's from another flatpak container. Hence, it behaves like shown above.

IMO if ConfirmAccessItem is set to false KPXC should not show that dialog, instead allows the process (with the inaccessible binary) to access the requested data right away.

@droidmonkey
Copy link
Collaborator

This is a bug in KeePassXC itself

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants