How to configure GNOME Keyring to by default NOT automatically unlock keyrings whenever logged in, on Debian?
On a Debian Buster system I use, the password for connecting to a VPN is stored in the GNOME Keyring. Therefore, whenever I want to connect to the VPN in question, I get prompted to unlock my keyring. This is unproblematic.
However, that dialog has a checkbox "Automatically unlock this keyring whenever I'm logged in", which defaults to being checked.
I don't want that, so every time, I have to go out of my way to uncheck it.
I'm finding plenty of suggestions on how to unlock the keyring automatically and immediately upon login (for example, using libpam-gnome-keyring), but I want the opposite.
How can I configure the system to default to not automatically unlock the keyring whenever I'm logged in?
1 answer
Two things:
First, if you create a second keyring, one not named login.keyring, it will not be automatically unlocked on login.
Second, GNOME has a policy that they don't let users configure things that the developers don't want them to configure, so you probably cannot change the default checkbox setting at all without maintaining your own version of the process that presents the unlock keyring.
Luckily: this is the Debian version, and it has active maintainers. You can file a bug against pinentry (presumably pinentry-gtk) and ask for this checkbox to be unchecked by default.
0 comment threads
1 comment thread