Re: Fix needed for communication with gpg-agent

[Andreas Schwab]

Chong Yidong <address@hidden> writes:

> This is arguably a security hole because it makes it too easy for root
> to find people's passwords (granted, root can easily steal passwords
> anyway, but it arguably shouldn't be *this* easy.)

If you are root you can read every process's memory, no matter where it is
stored.

Andreas.

-- 
Andreas Schwab, SuSE Labs, address@hidden
SuSE Linux Products GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
PGP key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."