m-chrzan.xyz
aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-06-14Add tests and documentation of passing options to grep(1)Norbert Buchmueller
2018-06-14Ensure signature regexes are anchoredJason A. Donenfeld
Fixes CVE-2018-12356. Reported-by: Marcus Brinkmann <marcus.brinkmann@ruhr-uni-bochum.de>
2018-06-10Replace noplaintext.vim as redact_pass.vim pluginTom Ryder
Per debugging from Enno Nagel <enno.nagel+vim@gmail.com>, it's become apparent to me that to have any degree of confidence that none of these options have actually got any plaintext password data in them, we need to disable the options globally when a password file is edited. In particular, in the case of the 'viminfo' global option, it's not possible to disable it per path, and not terribly meaningful either; things like the last seach pattern or the contents of registers, i.e. global state of the editor, are recorded. There's no sensible approach I can see except to actually switch the feature off entirely by blanking it. I've therefore completely rewritten this, to make as thorough a check as possible that the Vim user is editing a pass(1) file by calling `pass edit`, and then to disable the "leaky" options globally, with an explicit warning so that the user can see it's been done. This plugin is also available as Vim script #5707: <https://www.vim.org/scripts/script.php?script_id=5707> Its homepage is here: <https://sanctum.geek.nz/cgit/vim-redact-pass.git/about/>
2018-05-24grep: allow grep options and argumentsSitaram Chamarty
Allow grep options and arguments. Typical uses may be, for instance, wanting to ignore case ('-i'), print a few lines of context around the matched line, multiple patterns with '-e', etc. (background: grep is deprecating GREP_OPTIONS, so eventually that will stop working).
2018-02-19fish: reduce completion runtimesMathis Antony
Fish completion spends most of the time in calls to `sed` in for loops over entries and directories. This patch removes the repeated calls to `sed`. Signed-off-by: Mathis Antony <sveitser@gmail.com>
2018-02-08generate: disallow zero length generated passwordsJason A. Donenfeld
2018-02-01generate: in-place should work when file is emptyJason A. Donenfeld
2017-12-18Quote array specifierJason A. Donenfeld
Otherwise this expands to a filename if one exists. Suggested-by: izaberina@gmail.com
2017-10-13protect dirname calls from pass-names that look like command-line optionsStacey Sheldon
With the $path variable being passed directly to dirname, any pass-names provided by the user that happened to look like options to dirname would be processed as options rather than as the path to be split. This results in a real mess when you happen to run one of: pass edit --help pass generate --help pass insert --help then in the cmd_foo() function, you have: mkdir -p -v "$PREFIX/$(dirname --help)" which (due to the -p option to mkdir) results in the creation of an entire directory hierarchy made up of the slash-separated help text from dirname.
2017-09-15passmenu: Don't eat whitespace at beginning/end of passwordDaniel Lublin
If IFS (Input Field Separator) is not emptied, read will actually strip spaces and tabs at the beginning/end end of the "line".
2017-08-29emacs: Release version 1.0.1 of Emacs packageSvend Sorensen
2017-08-29emacs: --run-async: Quote shell argumentsDamien Cassou
This is important for filenames with special characters such as spaces and parenthesis.
2017-08-29emacs: Update author's email addressSvend Sorensen
2017-08-29emacs: Fix package-lint violationsSvend Sorensen
2017-07-26emacs: Release version 1.0.0 of Emacs packageSvend Sorensen
2017-07-26emacs: Use with-editor to wrap "pass edit"Svend Sorensen
Instead of editing the password file directly using Emacs, "pass edit" is run. This allows password-store's git change tracking to work. This adds a dependency on the with-editor Emacs package.
2017-04-13Bump versionJason A. Donenfeld
2017-04-13init: match only the public keyJason A. Donenfeld
2017-03-28Use $GPG variableJason A. Donenfeld
2017-03-20Fix compatibility with GnuPG 2.2.19Andreas Stieger
GnuPG 2.2.19 added a warning when no command was given. * src/password-store.sh (reencrypt_path): Add --decrypt to --list-only * tests/t0300-reencryption.sh (gpg_keys_from_encrypted_file): same https://bugs.gnupg.org/gnupg/msg9873 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=810adfd47801fc01e45fb71af9f05c91f7890cdb https://bugzilla.suse.com/show_bug.cgi?id=1028867
2017-03-01tests: fix on OSX by not using the tr hackJason A. Donenfeld
2017-02-26Bump versionJason A. Donenfeld
2017-02-26Modernize makefileJason A. Donenfeld
2017-02-25CopyrightJason A. Donenfeld
2017-02-25StyleJason A. Donenfeld
2017-02-25git: use inner-most directoryJason A. Donenfeld
2017-02-25clip: sleep may require argv[0] to be sleepJason A. Donenfeld
2017-02-25man: document system extensionsJason A. Donenfeld
2017-02-25pwsafe2pass: add importerSam Mason
2017-02-25Support git worktree.Kevin Lyda
Git worktree works with the normal .git directory instead being a .git file with a reference to the primary git repository.
2017-02-25keepassx2pass: port to python3Fabio Zanini
2017-02-25man: fix typosJustin Gassner
2017-02-25Don’t reencrypt data not managed by pass.Sebastian Reuße
When keeping the password-store under git, it can make sense using a git extension such as git-annex instead of the native git object store to store the encrypted files. Inter alia, this allows one to selectively expire old copies of the encrypted data, while otherwise, one would need to recreate the complete repository when a key should no longer have access to some of the data. Since using the git-annex object store means that *.gpg files (and directories named *.gpg) are kept under .git/… (non-writable), the reencryption logic used by pass currently fails. To remedy this, we now ignore everything kept under .git when looking for files to reencrypt or when grepping.
2017-02-25tests: fix for recent changesJason A. Donenfeld
2017-02-25keepasss2csv2pass: improve and make more flexibleNathan Sommer
- Code is now PEP 8 compliant - Uses argparse module for command line arguments - Prints what it will do and prompts for confirmation before proceeding - Does not put URL and notes fields in the entry unless they are present in the CSV file - Adds a "user" field in the entry - There are now command line arguments for the following: - Exclude specific groups from being imported - Convert groups and names to lowercase - Use the name of the KeePass entry rather than the username as the pass entry name
2017-01-01show,generate: support qrcodesJason A. Donenfeld
2016-12-21makefile: proper use of DESTPATHJason A. Donenfeld
2016-12-21extensions: introduce system extensionsJason A. Donenfeld
2016-12-211password2pass: modernizationAlex Dunn
2016-12-21extensions: make opt-inJason A. Donenfeld
2016-12-21Add signaturesJason A. Donenfeld
2016-12-20Add extensionsJason A. Donenfeld
2016-12-20generate: use /dev/urandom directlyJason A. Donenfeld
Passing to tr using the "pick and discard" technique is more straight- forwardly correct and less error-prone. It also allows users to select their own character sets to be passed to tr.
2016-02-07dmenu: read likes -rJason A. Donenfeld
2016-02-06zsh-completion: add prefix zstyleBenjamin Richter
This option can be used to select a different pass repository for completion. A configuration example is given inside the completion file.
2016-02-06Make gpg errors fatalJason A. Donenfeld
2016-02-06Moved to webpageJason A. Donenfeld
2016-02-06keepass2csv2passDavid Francoeur
The CSV is generated by KeePassX 2.0 on Mac OSX
2016-02-06Revert "show: allow passing prefix to clip"Jason A. Donenfeld
This reverts commit fcb92ed69fc191e39379bad715371d8c28410885. Needs more discussion.
2016-02-06Fix zsh completion when path contains \Simon Gomizelj