aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Use pipefail and randomize intermediate encrypted.1.5Jason A. Donenfeld2014-04-121-2/+4
| | | | | | | | | | | | | | | | | | | | | | Matthew writes: If the initial decrypt fails then the rest of the line shouldn't continue, as it won't be a properly decrypted password being re-encrypted and written over the existing passfile. One solution to this would be to enable pipefail (set -o pipefail) - either just before, or at the start of this script. This would cause the failure of any of the commands in a pipe to set the return status of the whole pipeline to non-zero (the last failed command's return code is used). We take his suggestion with this patch. While we're at it, we take a little bit extra care (though not too much extra care) to select a more random intermediate password, in case folks have a strange habit of using a dot-new extension on files. Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* Make completion cleaner.Jason A. Donenfeld2014-04-061-3/+4
|
* bash-completion: complete the new init -p switch.Jason A. Donenfeld2014-04-061-6/+19
|
* Fix GPG spelling.Jason A. Donenfeld2014-04-051-1/+1
|
* Fix path to /dev/nullPeter Haza2014-04-051-1/+1
|
* Update zsh completion.Johan Venant2014-03-241-2/+7
|
* Add some commonly used completions for `pass git`Dmitry Medvinsky2014-03-241-0/+3
|
* Update copyright years and email addressDmitry Medvinsky2014-03-241-1/+1
|
* Add `-p` `--path` option completion for `pass init`Dmitry Medvinsky2014-03-241-0/+1
|
* Use heredoc for unset error.Jason A. Donenfeld2014-03-231-4/+6
| | | | Suggested-by: Tom Vincent <pass@tlvince.com>
* umask: allow overridableJason A. Donenfeld2014-03-231-1/+1
| | | | Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk>
* Heredoc refresh.Jason A. Donenfeld2014-03-231-43/+45
|
* clip: wait longer for slow systemsJason A. Donenfeld2014-03-232-2/+2
|
* gpg: allow the use of gpg1 with or without agentJason A. Donenfeld2014-03-221-10/+15
| | | | Suggested-by: Matthieu Weber <mweber@free.fr>
* clip: rename SELECTION to X_SELECTIONJason A. Donenfeld2014-03-221-5/+5
|
* Version bump ahead of release.Jason A. Donenfeld2014-03-221-1/+1
|
* Makefile: do not use recursion and organizeJason A. Donenfeld2014-03-223-0/+307
|
* clip: suppress kill errorJason A. Donenfeld2014-03-222-3/+3
|
* clip: do not race on osxJason A. Donenfeld2014-03-221-5/+5
|
* clip: use pkill instead of procJason A. Donenfeld2014-03-221-1/+1
|
* Prefer bash parameter expansion over basename(1)Tom Vincent2014-03-201-1/+1
|
* Fix argument order for mktempjbeta2014-03-201-2/+2
| | | | | mktemp expects all options before a template. This prevented the temporary file for "pass edit" mode from being created in /dev/shm.
* Configurable clipboard time.Jason A. Donenfeld2014-03-201-4/+5
|
* Allow selection to be overriden by $SELECTIONJason A. Donenfeld2014-03-201-4/+5
| | | | | | Some users want to use a different clipboard for pass. Suggested-by: nand <nand@nand.wakku.to>
* git: sign commits if enabledJason A. Donenfeld2014-03-201-1/+2
|
* clip: don't race between pass instances in restoreJason A. Donenfeld2014-03-201-2/+4
| | | | | | | We now make sure a previous pass clip restore finishes immediately when copying another password to the clipboard. This is currently only implemented on Linux.
* Style.Jason A. Donenfeld2014-03-201-3/+1
|
* Simplify exports.Jason A. Donenfeld2014-03-191-4/+3
|
* Copyright noticeJason A. Donenfeld2014-03-191-1/+1
|
* Team pass: enable multiple keys and per directoryJason A. Donenfeld2014-03-191-34/+63
| | | | | | | | | | The .gpg-id file may now have multiple keys in it, one per line. If a .gpg-id file exists inside a subdirectory, passwords inside that directory are encrypted to that/those ids. The init command has learned a -p/--path option for writing such a sub directory .gpg-id and now can take several arguments for ids.
* Shred shm files.Jason A. Donenfeld2014-03-183-1/+4
|
* Do not compress passwords.Jason A. Donenfeld2014-03-181-1/+1
| | | | | | | | | | | According to a forthcoming paper by Alfredo Pironti, OpenPGP compression can reveal entropy levels. We thus disable compression. Existing password stores can be reencrypted without compression using the "--reencrypt" flag for "init". Reported-by: Alfredo Pironti <alfredo.pironti@inria.fr> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* Use a glob in the pattern match instead of using two comparisons for [yY].Chris Down2013-09-141-1/+1
|
* Rephrase awkward/confusing message about enabling echo during password entry.Chris Down2013-09-141-3/+3
|
* Fix directory traversal for reencryption when $PREFIX is a symlinkBrian Shore2013-09-141-1/+1
|
* check if a passfile exists before checking for directoryBrian Mattern2013-05-221-13/+12
|
* Simplify sed to not use replacement.Jason A. Donenfeld2013-04-041-1/+1
|
* Tree should follow symlinks.Marvin Killing2013-02-231-1/+1
| | | | Make show/ls/list follow links by passing -l to tree.
* Bump version.Jason A. Donenfeld2012-10-181-1/+1
|
* Do not interpret backslashes when reading passwordsguns2012-10-171-4/+4
| | | | | | | | | | | | | | | | | The `read` builtin accepts backslash notation for common non-printing characters by default, like `\t` and `\n`. This requires that any literal backslashes must also be escaped as `\\`. Given that `gpg -e` does not interpret input, the `read` invocations are changed to do the same. Also, the right hand side of an `==` comparison within `[[ ]]` must be quoted in order to suppress pattern metacharacter expansion. Quoting the bash manual: When the == and != operators are used, the string to the right of the operator is considered a pattern and matched according to the rules described below under Pattern Matching.
* Restore exclusivity of options in multiline/echo check.Jason A. Donenfeld2012-10-091-1/+1
|
* Trim trailing slash in tree display.Jason A. Donenfeld2012-10-051-1/+1
|
* Make --no-echo default, and rename to --echo.Jason A. Donenfeld2012-10-031-8/+8
| | | | Reported-by: Paul Wise <pabs@debian.org>
* Check error code of gpg before copying to clipboard.1.4.1Jason A. Donenfeld2012-09-301-1/+3
|
* Explicitly use gpg2 rather than relying on symlink.Jason A. Donenfeld2012-09-303-12/+9
|
* Style fixes.1.4Jason A. Donenfeld2012-09-241-1/+2
|
* Fix style.Jason A. Donenfeld2012-09-231-11/+9
|
* Add FreeBSD platform fileJonathan Chu2012-09-231-0/+21
| | | | | Redefine GNUPG and GETOPT for port paths Redefine tmpdir() for a different ramdisk path
* Normalize negation and bashism.Jason A. Donenfeld2012-09-221-7/+7
|
* Fix directory removal.Jason A. Donenfeld2012-09-221-5/+8
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.