#1744 Allow plugin location separate from application path

KeePass_2.x
closed
nobody
5
2013-06-29
2013-06-29
John L. Galt
No

I'd like for the ability to allow KP to have plugins placed not directly in the same path as the application. Reason being is that with the actual Windows installer, if a format and reinstall is required, then the user has to also manually reinstall those plugins as well, and on Vista+ access to program Files tree is restricted by UAC, making it quite cumbersome to reset everything.

If the plugins were allowed to be located in another location, such as on a separate physical drive, or in the User's profile folder, where UAC is not an issue, then reinstalling all plugins after a format and reinstall of the OS would not be nearly as cumbersome.

Discussion

  • Paul
    Paul
    2013-06-29

    UAC provides protection from malicious delivery of plug-ins. Only administrators can install plug-ins so only administrators can compromise KeePass.

    cheers, Paul

     
  • Dominik Reichl
    Dominik Reichl
    2013-06-29

    • status: open --> closed
     
  • Dominik Reichl
    Dominik Reichl
    2013-06-29

    For security reasons, plugins are only loaded from the application directory.

    If plugins should be loaded from a different directory, these plugins would need to be authenticated manually, e.g. by an administrator specifying the hash of a plugin file in the configuration file in the application directory. However, it's much easier to place the plugin file in the application directory than such a complex authentication mechanism.

    Best regards,
    Dominik