Add option to disable KWallet entirely in the new wallet dialog
Needs ReviewPublic

Authored by fvogt on Aug 10 2018, 10:01 AM.

Details

Reviewers
None
Group Reviewers
Frameworks
Summary

Users are greeted by this dialog on the first request by any application.
Even if they press cancel, the dialog will pop up on subsequent requests again.
The only way to disable this is using the KCM, which is not intuitive enough.
So add a new option to the new wallet creation dialog.

Test Plan

Selected the option, kwallet is now disabled.

Diff Detail

Repository
R311 KWallet
Branch
disableopt
Lint
No Linters Available
Unit
No Unit Test Coverage
Build Status
Buildable 2035
Build 2053: arc lint + arc unit
fvogt created this revision.Aug 10 2018, 10:01 AM
Restricted Application added a project: Frameworks. · View Herald TranscriptAug 10 2018, 10:01 AM
fvogt requested review of this revision.Aug 10 2018, 10:01 AM
dfaure added a subscriber: dfaure.Aug 10 2018, 10:34 AM

+1, looks good to me (I just wonder how well KDE applications actually behave with KWallet disabled...)

+1 conceptually, as this seems relevant to the privacy initiative as well.

aacid added a subscriber: aacid.Aug 11 2018, 4:19 PM

Isn't this actually bad for the privacy goal? AFAIK some apps will just write the password in cleartext in a config file when kwallet is not present.

src/runtime/kwalletd/knewwalletdialog.h
67

do we really need to rename this?

fvogt added a comment.Aug 11 2018, 4:26 PM

Isn't this actually bad for the privacy goal? AFAIK some apps will just write the password in cleartext in a config file when kwallet is not present.

It's not selected by default - but maybe that can be emphasized in the option's name?

fvogt updated this revision to Diff 40079.Aug 20 2018, 7:36 PM

Quit kwalletd if option was selected.

The .sync is necessary because the change is made in a KSharedConfig but read
by the simple KConfig in reconfigure. I guess it should use KSharedConfig
everywhere and just call "reparseConfiguration" in reconfigure manually. That's
something for another patch however.

fvogt added inline comments.Aug 20 2018, 7:38 PM
src/runtime/kwalletd/knewwalletdialog.h
67

It's not just a rename - it's doing the opposite now as there are three instead of two actions.

If you follow which slot this ends up, it's responsible for switching between "Next" and "Finished" buttons in the step. Next is only shown if GPG is selected, so this makes IMO more sense.

The patch looks OK to me, but yeah, it should be emphasized that disabling KWallet *reduces* security greatly.