| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | fix(security): decrypt the cmail password under a tight umask | Craig Jennings | 40 hours | 1 | -0/+79 |
| gpg writes its output at the process umask (often 0644), so the plaintext mail password was world-readable between the decrypt and the chmod. I extracted decrypt_to_secure, which runs the decrypt in a 0077 umask subshell so the file is 0600 from creation. A fake-gpg test pins that the write runs under the tight umask. | |||||
 |
git.cjennings.net : archsetup | |
| Builds a full dev workstation from a bare Arch Linux install. | Craig Jennings |
| aboutsummaryrefslogtreecommitdiff |