[Tickets #6872] Re: gpg keys pair

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/6872
-----------------------------------------------------------------------
 Ticket             | 6872
 Updated By         | kkkrrruuulll at yahoo.it
 Summary            | gpg keys pair
 Queue              | IMP
 Version            | 4.2
 Type               | Bug
 State              | Not A Bug
 Priority           | 1. Low
 Milestone          |
 Patch              |
 Owners             |
-----------------------------------------------------------------------


kkkrrruuulll at yahoo.it (2008-06-10 07:45) wrote:

>[...]
>
>> Not to mention that a web process having sudo
>> powers is likely opening up a *way* bigger security hole than any
>> security shortcomings you are trying to mask.
>
> i don't know... i'm not very expert... but i think that is easier to
> "crack" a db that a process ran with sudo

if you don't want to use sudo, i think you can use the gnupg's parameter
--homedir (which value can be saved on user's preferences)