Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use pipefail and randomize intermediate encrypted.1.5 | Jason A. Donenfeld | 2014-04-12 | 1 | -2/+4 |
| | | | | | | | | | | | | | | | | | | | | | | Matthew writes: If the initial decrypt fails then the rest of the line shouldn't continue, as it won't be a properly decrypted password being re-encrypted and written over the existing passfile. One solution to this would be to enable pipefail (set -o pipefail) - either just before, or at the start of this script. This would cause the failure of any of the commands in a pipe to set the return status of the whole pipeline to non-zero (the last failed command's return code is used). We take his suggestion with this patch. While we're at it, we take a little bit extra care (though not too much extra care) to select a more random intermediate password, in case folks have a strange habit of using a dot-new extension on files. Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | ||||
* | Make completion cleaner. | Jason A. Donenfeld | 2014-04-06 | 1 | -3/+4 |
| | |||||
* | bash-completion: complete the new init -p switch. | Jason A. Donenfeld | 2014-04-06 | 1 | -6/+19 |
| | |||||
* | Fix GPG spelling. | Jason A. Donenfeld | 2014-04-05 | 1 | -1/+1 |
| | |||||
* | Fix path to /dev/null | Peter Haza | 2014-04-05 | 1 | -1/+1 |
| | |||||
* | Update zsh completion. | Johan Venant | 2014-03-24 | 1 | -2/+7 |
| | |||||
* | Add some commonly used completions for `pass git` | Dmitry Medvinsky | 2014-03-24 | 1 | -0/+3 |
| | |||||
* | Update copyright years and email address | Dmitry Medvinsky | 2014-03-24 | 1 | -1/+1 |
| | |||||
* | Add `-p` `--path` option completion for `pass init` | Dmitry Medvinsky | 2014-03-24 | 1 | -0/+1 |
| | |||||
* | Use heredoc for unset error. | Jason A. Donenfeld | 2014-03-23 | 1 | -4/+6 |
| | | | | Suggested-by: Tom Vincent <pass@tlvince.com> | ||||
* | umask: allow overridable | Jason A. Donenfeld | 2014-03-23 | 1 | -1/+1 |
| | | | | Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk> | ||||
* | Heredoc refresh. | Jason A. Donenfeld | 2014-03-23 | 1 | -43/+45 |
| | |||||
* | clip: wait longer for slow systems | Jason A. Donenfeld | 2014-03-23 | 2 | -2/+2 |
| | |||||
* | gpg: allow the use of gpg1 with or without agent | Jason A. Donenfeld | 2014-03-22 | 1 | -10/+15 |
| | | | | Suggested-by: Matthieu Weber <mweber@free.fr> | ||||
* | clip: rename SELECTION to X_SELECTION | Jason A. Donenfeld | 2014-03-22 | 1 | -5/+5 |
| | |||||
* | Version bump ahead of release. | Jason A. Donenfeld | 2014-03-22 | 1 | -1/+1 |
| | |||||
* | Makefile: do not use recursion and organize | Jason A. Donenfeld | 2014-03-22 | 3 | -0/+307 |
| | |||||
* | clip: suppress kill error | Jason A. Donenfeld | 2014-03-22 | 2 | -3/+3 |
| | |||||
* | clip: do not race on osx | Jason A. Donenfeld | 2014-03-22 | 1 | -5/+5 |
| | |||||
* | clip: use pkill instead of proc | Jason A. Donenfeld | 2014-03-22 | 1 | -1/+1 |
| | |||||
* | Prefer bash parameter expansion over basename(1) | Tom Vincent | 2014-03-20 | 1 | -1/+1 |
| | |||||
* | Fix argument order for mktemp | jbeta | 2014-03-20 | 1 | -2/+2 |
| | | | | | mktemp expects all options before a template. This prevented the temporary file for "pass edit" mode from being created in /dev/shm. | ||||
* | Configurable clipboard time. | Jason A. Donenfeld | 2014-03-20 | 1 | -4/+5 |
| | |||||
* | Allow selection to be overriden by $SELECTION | Jason A. Donenfeld | 2014-03-20 | 1 | -4/+5 |
| | | | | | | Some users want to use a different clipboard for pass. Suggested-by: nand <nand@nand.wakku.to> | ||||
* | git: sign commits if enabled | Jason A. Donenfeld | 2014-03-20 | 1 | -1/+2 |
| | |||||
* | clip: don't race between pass instances in restore | Jason A. Donenfeld | 2014-03-20 | 1 | -2/+4 |
| | | | | | | | We now make sure a previous pass clip restore finishes immediately when copying another password to the clipboard. This is currently only implemented on Linux. | ||||
* | Style. | Jason A. Donenfeld | 2014-03-20 | 1 | -3/+1 |
| | |||||
* | Simplify exports. | Jason A. Donenfeld | 2014-03-19 | 1 | -4/+3 |
| | |||||
* | Copyright notice | Jason A. Donenfeld | 2014-03-19 | 1 | -1/+1 |
| | |||||
* | Team pass: enable multiple keys and per directory | Jason A. Donenfeld | 2014-03-19 | 1 | -34/+63 |
| | | | | | | | | | | The .gpg-id file may now have multiple keys in it, one per line. If a .gpg-id file exists inside a subdirectory, passwords inside that directory are encrypted to that/those ids. The init command has learned a -p/--path option for writing such a sub directory .gpg-id and now can take several arguments for ids. | ||||
* | Shred shm files. | Jason A. Donenfeld | 2014-03-18 | 3 | -1/+4 |
| | |||||
* | Do not compress passwords. | Jason A. Donenfeld | 2014-03-18 | 1 | -1/+1 |
| | | | | | | | | | | | According to a forthcoming paper by Alfredo Pironti, OpenPGP compression can reveal entropy levels. We thus disable compression. Existing password stores can be reencrypted without compression using the "--reencrypt" flag for "init". Reported-by: Alfredo Pironti <alfredo.pironti@inria.fr> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | ||||
* | Use a glob in the pattern match instead of using two comparisons for [yY]. | Chris Down | 2013-09-14 | 1 | -1/+1 |
| | |||||
* | Rephrase awkward/confusing message about enabling echo during password entry. | Chris Down | 2013-09-14 | 1 | -3/+3 |
| | |||||
* | Fix directory traversal for reencryption when $PREFIX is a symlink | Brian Shore | 2013-09-14 | 1 | -1/+1 |
| | |||||
* | check if a passfile exists before checking for directory | Brian Mattern | 2013-05-22 | 1 | -13/+12 |
| | |||||
* | Simplify sed to not use replacement. | Jason A. Donenfeld | 2013-04-04 | 1 | -1/+1 |
| | |||||
* | Tree should follow symlinks. | Marvin Killing | 2013-02-23 | 1 | -1/+1 |
| | | | | Make show/ls/list follow links by passing -l to tree. | ||||
* | Bump version. | Jason A. Donenfeld | 2012-10-18 | 1 | -1/+1 |
| | |||||
* | Do not interpret backslashes when reading passwords | guns | 2012-10-17 | 1 | -4/+4 |
| | | | | | | | | | | | | | | | | | The `read` builtin accepts backslash notation for common non-printing characters by default, like `\t` and `\n`. This requires that any literal backslashes must also be escaped as `\\`. Given that `gpg -e` does not interpret input, the `read` invocations are changed to do the same. Also, the right hand side of an `==` comparison within `[[ ]]` must be quoted in order to suppress pattern metacharacter expansion. Quoting the bash manual: When the == and != operators are used, the string to the right of the operator is considered a pattern and matched according to the rules described below under Pattern Matching. | ||||
* | Restore exclusivity of options in multiline/echo check. | Jason A. Donenfeld | 2012-10-09 | 1 | -1/+1 |
| | |||||
* | Trim trailing slash in tree display. | Jason A. Donenfeld | 2012-10-05 | 1 | -1/+1 |
| | |||||
* | Make --no-echo default, and rename to --echo. | Jason A. Donenfeld | 2012-10-03 | 1 | -8/+8 |
| | | | | Reported-by: Paul Wise <pabs@debian.org> | ||||
* | Check error code of gpg before copying to clipboard.1.4.1 | Jason A. Donenfeld | 2012-09-30 | 1 | -1/+3 |
| | |||||
* | Explicitly use gpg2 rather than relying on symlink. | Jason A. Donenfeld | 2012-09-30 | 3 | -12/+9 |
| | |||||
* | Style fixes.1.4 | Jason A. Donenfeld | 2012-09-24 | 1 | -1/+2 |
| | |||||
* | Fix style. | Jason A. Donenfeld | 2012-09-23 | 1 | -11/+9 |
| | |||||
* | Add FreeBSD platform file | Jonathan Chu | 2012-09-23 | 1 | -0/+21 |
| | | | | | Redefine GNUPG and GETOPT for port paths Redefine tmpdir() for a different ramdisk path | ||||
* | Normalize negation and bashism. | Jason A. Donenfeld | 2012-09-22 | 1 | -7/+7 |
| | |||||
* | Fix directory removal. | Jason A. Donenfeld | 2012-09-22 | 1 | -5/+8 |
| |