Items on Local Keychain do not have Access Controls
| Originator: | pepi.zawodsky | ||
| Number: | rdar://15656366 | Date Originated: | 13-Dec-2013 04:33 PM |
| Status: | Open | Resolved: | |
| Product: | OS X | Product Version: | 10.9 (13A603) |
| Classification: | Serious Bug | Reproducible: | Always |
Summary: Items on Local Keychain do not have Access Controls Steps to Reproduce: Have any item on the Local Items Keychain. Get info, go to the Access Control Tab. Expected Results: Access Controls should be available to control which applications/processes/binaries do get access to a certain keychain item. Actual Results: Access controls are not available for any item on the Local Items keychain. It seems that ANY application can get unlimited access to any item on this keychain. Regression: This only applies to the unwanted Local Items keychain that is forced on users of Mavericks which removes a user's control over their private data stored in Keychain files. Notes: Trust is the OS X keychain architecture is also removed. I do not trust OS X anymore to keep my data in .keychain files secure anymore.
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!