m-chrzan.xyz
aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2018-06-14Don't trap INT or TERM; they are redundant and can break `pass edit`.Nick Kousu
Some EDITORs, notably Linux vi(1), which is the fallback default in pass, apparently send INT when they exit, and when pass is run under bash (which is also its default)--if you have /dev/shm/ available--bash catches this and cleans up your edited password file *before* it can be reencrypted and saved. This only happens with `pass edit`; none of the other commands combine tmpdir and $EDITOR.
2018-06-14Add tests and documentation of passing options to grep(1)Norbert Buchmueller
2018-06-14Ensure signature regexes are anchoredJason A. Donenfeld
Fixes CVE-2018-12356. Reported-by: Marcus Brinkmann <marcus.brinkmann@ruhr-uni-bochum.de>
2018-05-24grep: allow grep options and argumentsSitaram Chamarty
Allow grep options and arguments. Typical uses may be, for instance, wanting to ignore case ('-i'), print a few lines of context around the matched line, multiple patterns with '-e', etc. (background: grep is deprecating GREP_OPTIONS, so eventually that will stop working).
2018-02-19fish: reduce completion runtimesMathis Antony
Fish completion spends most of the time in calls to `sed` in for loops over entries and directories. This patch removes the repeated calls to `sed`. Signed-off-by: Mathis Antony <sveitser@gmail.com>
2018-02-08generate: disallow zero length generated passwordsJason A. Donenfeld
2018-02-01generate: in-place should work when file is emptyJason A. Donenfeld
2017-12-18Quote array specifierJason A. Donenfeld
Otherwise this expands to a filename if one exists. Suggested-by: izaberina@gmail.com
2017-10-13protect dirname calls from pass-names that look like command-line optionsStacey Sheldon
With the $path variable being passed directly to dirname, any pass-names provided by the user that happened to look like options to dirname would be processed as options rather than as the path to be split. This results in a real mess when you happen to run one of: pass edit --help pass generate --help pass insert --help then in the cmd_foo() function, you have: mkdir -p -v "$PREFIX/$(dirname --help)" which (due to the -p option to mkdir) results in the creation of an entire directory hierarchy made up of the slash-separated help text from dirname.
2017-04-13Bump versionJason A. Donenfeld
2017-04-13init: match only the public keyJason A. Donenfeld
2017-03-28Use $GPG variableJason A. Donenfeld
2017-03-20Fix compatibility with GnuPG 2.2.19Andreas Stieger
GnuPG 2.2.19 added a warning when no command was given. * src/password-store.sh (reencrypt_path): Add --decrypt to --list-only * tests/t0300-reencryption.sh (gpg_keys_from_encrypted_file): same https://bugs.gnupg.org/gnupg/msg9873 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=810adfd47801fc01e45fb71af9f05c91f7890cdb https://bugzilla.suse.com/show_bug.cgi?id=1028867
2017-02-26Bump versionJason A. Donenfeld
2017-02-25CopyrightJason A. Donenfeld
2017-02-25StyleJason A. Donenfeld
2017-02-25git: use inner-most directoryJason A. Donenfeld
2017-02-25clip: sleep may require argv[0] to be sleepJason A. Donenfeld
2017-02-25Support git worktree.Kevin Lyda
Git worktree works with the normal .git directory instead being a .git file with a reference to the primary git repository.
2017-02-25Don’t reencrypt data not managed by pass.Sebastian Reuße
When keeping the password-store under git, it can make sense using a git extension such as git-annex instead of the native git object store to store the encrypted files. Inter alia, this allows one to selectively expire old copies of the encrypted data, while otherwise, one would need to recreate the complete repository when a key should no longer have access to some of the data. Since using the git-annex object store means that *.gpg files (and directories named *.gpg) are kept under .git/… (non-writable), the reencryption logic used by pass currently fails. To remedy this, we now ignore everything kept under .git when looking for files to reencrypt or when grepping.
2017-01-01show,generate: support qrcodesJason A. Donenfeld
2016-12-21extensions: introduce system extensionsJason A. Donenfeld
2016-12-21extensions: make opt-inJason A. Donenfeld
2016-12-21Add signaturesJason A. Donenfeld
2016-12-20Add extensionsJason A. Donenfeld
2016-12-20generate: use /dev/urandom directlyJason A. Donenfeld
Passing to tr using the "pick and discard" technique is more straight- forwardly correct and less error-prone. It also allows users to select their own character sets to be passed to tr.
2016-02-06zsh-completion: add prefix zstyleBenjamin Richter
This option can be used to select a different pass repository for completion. A configuration example is given inside the completion file.
2016-02-06Make gpg errors fatalJason A. Donenfeld
2016-02-06Revert "show: allow passing prefix to clip"Jason A. Donenfeld
This reverts commit fcb92ed69fc191e39379bad715371d8c28410885. Needs more discussion.
2016-02-06Fix zsh completion when path contains \Simon Gomizelj
2016-02-06init: put path in commit messageJason A. Donenfeld
2016-02-06completion: Output a space when appropriate on bash completionAnas Syed
Did this by not passing "-o nospace" to complete. Instead, put "compopt -o nospace" after a COMPREPLY that shouldn't add a space when autocompleting the only match
2016-02-06show: allow passing prefix to clipJason A. Donenfeld
2016-02-05show: better clip error messageJason A. Donenfeld
2016-02-05show: allow selecting which clip lineJason A. Donenfeld
2016-02-05generate: have a default length of 25Jason A. Donenfeld
Folks are lazy and don't want to type very much, so they'd like to have a default password length to generate that can be configured via environment variables per usual. I'm making the default 25. If the user forbids the use of symbols, pwgen will use a-zA-Z0-9, ensuring that at least one A-Z and at least one 0-9 is used. We want to have a password of at least 128-bits, so factoring in the issue with "at least one of this character type", 25 gets us there squarely. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-02-05Fix up moving ambiguity tooJason A. Donenfeld
2016-02-05Insert and edit work on files, so don't let the arguments be directoriesJason A. Donenfeld
2016-02-05Handle removal of directories and passwords with the same nameJason A. Donenfeld
2015-05-11Add openbsd platform file from David DahlbergJason A. Donenfeld
2015-05-11Use 6 Xs for mktempJason A. Donenfeld
2015-05-11enhance winpath detection: gpg --help will have a line like this: Home: C:\.....Lorenz Weber
2015-05-11Fix .gpg strippingJason A. Donenfeld
2015-05-11critcal fix for cygwin: gpg output to stdout ("gpg -o -") would have been ↵Lenz Weber
putput to a file named "-"
2015-05-11bashcomp: PASSWORD_STORE_DIR env var does not necessarily have a trailing slashSamuel Lethiec
2015-05-11add support for passing arbitrary options to all invocations of GPGDavid Adam
Uses the PASSWORD_STORE_GPG_OPTS environment variable. Can be used to (e.g.) change the keyrings or trust model used.
2015-05-11Exit 1 when gpg fails in multiline too.Anne Jan Brouwer
Multiline insert errors gave a exit code of 0, now correctly propagated.
2015-02-11Suppress output when original file does not existJason A. Donenfeld
2015-01-28Bad code is bad.Jason A. Donenfeld
2015-01-28Bump versionJason A. Donenfeld