You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-eclipse.keyring and -eclipse.password runtime options can be used to change the location of the secure storage and bypass the password provider mecanism.
They are handled in org.eclipse.equinox.internal.security.storage.SecurePreferencesMapper::open. @user.home is replaced with the corresponding value.path during retrieval of the secure storage / keyring file in content in SecurePreferencesMapper::getKeyringFile but not in password file retrieval in SecurePreferencesMapper::processPassword
The documentation of those options clearly indicates that protection of the password file must be considered. Having the possibility to use @user.homecan help to avoid absolute path or computation from user name on the command line if user profile folder is used to store this file (or as indirect mounting point).
Password file
The password provider mechanism can be bypassed if you specify the "-eclipse.password " runtime option. In this case the contents of the file you specified as the argument will be used as a master password. While this option is valuable in some circumstances (such as headless applications), the protection of the password file becomes a consideration. The password file can be protected by the operating system access rights and/or by placing it on a removable storage, such as a USB key.
The text was updated successfully, but these errors were encountered:
mPorhel
added a commit
to mPorhel/equinox
that referenced
this issue
Jul 2, 2024
-eclipse.keyring and -eclipse.password runtime options can be used to change the location of the secure storage and bypass the password provider mecanism.
They are handled in org.eclipse.equinox.internal.security.storage.SecurePreferencesMapper::open.
@user.home
is replaced with the corresponding value.path during retrieval of the secure storage / keyring file in content in SecurePreferencesMapper::getKeyringFile but not in password file retrieval in SecurePreferencesMapper::processPasswordThe documentation of those options clearly indicates that protection of the password file must be considered. Having the possibility to use
@user.home
can help to avoid absolute path or computation from user name on the command line if user profile folder is used to store this file (or as indirect mounting point).@https://help.eclipse.org/latest/index.jsp?topic=%2Forg.eclipse.platform.doc.user%2Freference%2Fref-securestorage-options.htm
The text was updated successfully, but these errors were encountered: