Bug #1996267 “[snap] Doesn't store encrypted passwords unless in...” : Bugs : chromium-browser package : Ubuntu - NFHN Reader

[snap] Doesn't store encrypted passwords unless interface is connected

Bug #1996267 reported by Erlenmayr on 2022-11-11

This bug affects 5 people

Affects		Status	Importance	Assigned to	Milestone
	chromium-browser (Ubuntu)	Won't Fix	Undecided	Unassigned

Bug Description

In the Snap package of Chromium, Chromium is not protecting passwords with gnome-keyring (or KWallet).

As a result, copying the Chromium profile directory from the snap directory gives access to all stored passwords. This is a HIGH security risk. Regular users who are used to storing their passwords in browsers are probably unaware of this.

Note that Chromium is started with the command line option “--password-store=basic”. This hack should never have been released to the public.

The Chromium documentation states:
> --password-store=basic (to use the plain text store)

https://chromium.googlesource.com/chromium/src/+/master/docs/linux/password_storage.md