module wants GNOME-keyring opened up on import

Bug #1089200 reported by Moses Moore
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
urlgrabber (Ubuntu)
New
Undecided
Unassigned

Bug Description

The python module 'urlgrabber' is asking to use my keys/ authentication/ identity without being instructed by a human to fetch such information. It seems importing the module alone (for the sake of getting the __doc__ string) performs some automagic where it tries to use my personal keys before I even tell it that it may do so. This is scary and unexpected.

Steps to reproduce:

$ pydoc -k cheezburger
(no output to stdout or stderr)

$ sudo apt-get install python-urlgrabber
$ pydoc -k cheezburger
WARNING: gnome-keyring:: couldn't connect to: /run/user/moses/keyring-thWOug/pkcs11: No such file or directory
$ pydoc urlgrabber >/dev/null
WARNING: gnome-keyring:: couldn't connect to: /run/user/moses/keyring-thWOug/pkcs11: No such file or directory
$ python -c 'import urlgrabber'
WARNING: gnome-keyring:: couldn't connect to: /run/user/moses/keyring-thWOug/pkcs11: No such file or directory

$ sudo dpkg -r python-urlgrabber
$ pydoc -k cheezburger
(no output to stdout or stderr)

On the one hand: fetching my identity before being told to *do* anything is scary and weird.

On the other hand, if this scary behaviour is intentional, why only raise an error for the GNOME keyring? I don't have a ~/.netrc file nor whatever KDE uses for a password vault installed, but I don't see error messages for these either.

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: python-urlgrabber 3.9.1-4ubuntu2
ProcVersionSignature: Ubuntu 3.5.0-18.29-generic 3.5.7
Uname: Linux 3.5.0-18-generic i686
NonfreeKernelModules: nvidia
ApportVersion: 2.6.1-0ubuntu9
Architecture: i386
Date: Tue Dec 11 22:21:19 2012
MarkForUpload: True
PackageArchitecture: all
SourcePackage: urlgrabber
UpgradeStatus: Upgraded to quantal on 2012-10-19 (53 days ago)

Revision history for this message
Moses Moore (moses-mozai) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.