GNOME Keyring
GNOME Keyring (密钥环) 是 GNOME 用来存储密码,密钥,证书,并提供给应用程序使用的组件集合。它让密码存储安全且便捷。GNOME Keyring (密钥环) 和用户登录集成,因此在用户登录会话之后,密码存储会自动解锁,无需再为应用程序输入密码。GNOME Keyring (密钥环) 基于 PKCS#11 标准,是应用程序在智能卡和安全存储中管理证书和密钥的标准方法。
KDE 中对应替代的是 KWallet (KDE 钱包)。然而他们的设计遵从不同的标准,并不互相兼容。
管理密钥环
The GNOME Passwords and Keys allows you to browse, edit and delete items in your Keyring.
This is also the best way to control the keyring username and password. See GNOME Passwords and Keys for more information.
A workaround is to use the Find Files/Folders utility to locate the Keyring folder on the machine. When located, proceed to delete all the files inside this folder. The next time the application is run and references the keyring, a prompt will issued requesting a new username and password. The newer versions allow a blank username and password, but discourage such practice for risk of breeching security.
在 SDDM+KDE 中自动解锁
在 GDM+GNOME 环境中,当您登录桌面,GNOME 密钥环就会自动解锁。然而在 SDDM+KDE中,则不会解锁,您登录桌面后,还需要再次输入密码,不是很方便。
这里有一个解决方案!
编辑 /etc/pam.d/sddm
并添加 pam_gnome_keyring.so
:
#%PAM-1.0
auth include common-auth
auth optional pam_gnome_keyring.so
account include common-account
password include common-password
session required pam_loginuid.so
session include common-session
session optional pam_gnome_keyring.so auto_start
之后重启系统。