has GnuCash code been reviewed for security?

Aaron Laws dartme18 at gmail.com
Thu Nov 9 08:27:52 EST 2017


On Wed, Nov 8, 2017 at 8:35 PM, Marcus Winston <marcus at thechocolatehouse.net
> wrote:

> I've searched the web and mailing list archives for this one, but didn't
> find it. I'm just curious if GnuCash has ever gone through a code review
> specifically for security? Perhaps something like what was done for
> TrueCrypt...?


There aren't many angles for Gnucash security. Data can be stored in xml or
SQL. The SQL storage security is up to the provider: mysql, sqlite,
postgres. XML is in plain text, so you'll need to secure it physically or
using your operating system.

As Derek asks: what else would you like to know?


More information about the gnucash-user mailing list