Secure mail client [solved]

[ggaaron]

I'm using thunderbird to get my mail. Is there a way that I could put a password on running thunderbird, and probably other apps? So such app won't run without a password given.

[PaulBredbury]

Use a screensaver.

[Mantaar]

... or you could add another user who 'owns' executable permissions on thunderbird. You would have to log in as this user to be able read your mail (i.e. - open up a shell, su to this user and then execute thunderbird from within the shell. You don't have to have graphical access for that.)

You could also scramble this user's passwd and put yourself in the sudoers as the only one who can execute stuff with his permissions - so you only would get to execute tbird with your own passwd.

Why do you want to have it this way anyways? Doesn't make much sense to me...
_________________
Error compiling committee.c: too many arguments to function.

[ggaaron]

There are many programs (like thunderbird) that when run give too much information - firefox uses a password only for getting new mail, the old can be read without a password. If this computer was used only by me, I would lock everything, but other people also use this computer so I can't lock it while I'm out.

Thanks for help though.

[PaulBredbury]

[ggaaron]

But... This is not what I'm trying to do, I can make separate accounts, for example a guest account that couldn't touch my files, but that's not the point=/ Maybe I could encrypt the file and make a script to decrypt it when run and delete the decrypted file afterwards...

[PaulBredbury]

A user who is logged in as you could do exactly the same thing. Or a "trojan horse" similar thing. Or lots of other nastiness.

There's no point in implementing Mickey Mouse security, when you've got a decent security model waiting to be used.

[ggaaron]

Could do this providing that he knew the password.

[timeBandit]

You do realize, don't you, that Thunderbird's mail stores are per user, not system-wide? That is, two users (two separate login accounts) who each run Thunderbird will not be able to read each other's mail. All mail is stored in separate directories accessible (by default) only by the owner. Ditto for all applications that store state in the home directory: browser history, window manager customizations, most recently used files in office suites/editors, etc.

Sorry, but I'm completely failing to see how a separate user account fails to meet your need. Can you clarify how it does not?
_________________
Plants are pithy, brooks tend to babble--I'm content to lie between them.
Super-short f.g.o checklist: Search first, strip comments, mark solved, help others.

[ggaaron]

One user -one configuration system wide=) I think I solved this by using encfs.

Moreover any livecd can read my mail...

[PaulBredbury]

So can any keylogger, installed by anyone with your user permissions.

[timeBandit]