Keychain.app does not show Application bundle .keychain files

Originator:pepi.zawodsky
Number:rdar://15613251 Date Originated:09-Dec-2013 12:35 AM
Status:Open Resolved:
Product:OS X Product Version:10.9.0 (13A603)
Classification:Security Reproducible:Always
 
Summary:
Keychain.app does not show .keychain files contained in application bundles.

Steps to Reproduce:
Have any application that contains keychain files intalled on your system. For example iStat Server.app by bjango.com. Open Keychain Access.app and scan the list of keychains on the left hand side for this item.

Expected Results:
These .keychain files shoud be displayed in Keychain Access.app to give the user the full information which encrypted credentials are stored on their system.

Actual Results:
Any .keychain files contained in application bundles are hidden from the user.

Regression:
This may lead to unwanted true evaluation by the system security frameworks hidden from the user.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!