On Mon, Oct 3, 2011 at 6:59 AM, Jeff King <peff@xxxxxxxx> wrote: > On Fri, Sep 30, 2011 at 06:42:22PM -0400, Jay Soffian wrote: > >> Usually it won't. In the default case, the keychain is unlocked and no >> permission is needed to add an entry, nor to retrieve that entry by >> the application which added it. The prompt will only occur if the >> credential helper is not on the entry's ACL, or if the keychain is >> locked. > > Yeah. I was thinking the ACL prompt would come up more often, but I > guess most people would hit "allow always", since it would get annoying > pretty quickly otherwise (I didn't, because I was testing). In the normal case, the keychain entry would be added via the credential helper, so they'd never even see the prompt since the binary which adds an entry is automatically on that entry's ACL. > Side note: do you know how to edit those ACLs? I couldn't find it in the > keychain manager. It would be helpful for testing to be able to tweak it > (as a workaround, I just modified the binary, which apparently the > keychain code cares about). Double-click on the entry in Keychain Access, then click the "Access Control" tab. j. -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html