Commit Graph

652 Commits

Author SHA1 Message Date
hellekin
45c5b53cc4 Restore -o and make explicit it means 'options local to subcommand' (Closes #182) 2014-12-26 23:42:58 -03:00
hellekin
f1c6245c80 Honor mount options (fixes #181) and disambiguate -o (fixes #182) 2014-12-26 20:54:51 -03:00
Jaromil
c56bd74e22 minor versioning 2014-12-25 02:48:49 +01:00
Jaromil
d88fd5c9cb release versioning 2014-12-21 22:08:32 +01:00
Jaromil
c436b76a85 typo fix for gpg 1.4.11 affecting mint 13 and ubuntu 12, closes #175 2014-12-21 21:51:15 +01:00
Jaromil
3103787e5e Merge pull request #178 from JoelMon/fix-README-links
Fixed links to KNOWN_BUGS.md and doc/HACKING.txt documents. Close #176
2014-12-06 16:22:12 +00:00
Joel Montes de Oca
4290c66b85 Fixed the links to KNOWN_BUGS.md and doc/HACKING.txt documents. Close #176 2014-12-04 22:20:42 -05:00
Jaromil
10035d8aea downgraded gtk-tray to use gtk-2 libraries to stay out of systemd deps 2014-11-30 19:26:38 +01:00
Dani
e9d6227e68 Merge pull request #173 from x3nu/master
Small corrections (typos, whitespace, ...) for the German translations.
2014-11-27 20:51:58 +01:00
x3nu
022974dc51 Small corrections (typos/whitespace/...) 2014-11-27 18:20:05 +01:00
hellekin
f2b9c51ccf Merge pull request #172 from dyne/fix-170
Remove extra space and split message for accuracy (closes #170)
2014-11-27 13:47:15 -03:00
hellekin
b0c63ebf12 lapsus: not _notice, but _message 2014-11-27 13:40:58 -03:00
hellekin
29040b2d7f Replace tab with spaces 2014-11-27 13:01:35 -03:00
hellekin
8d6e0bde09 Update copyright years 2014-11-27 12:56:30 -03:00
hellekin
f7ea486e13 Remove extra space and split message for accuracy (fixes #170) 2014-11-27 12:47:12 -03:00
Jaromil
7e9419542a Merge pull request #169 from JoelMon/update-man-pdf
Updated tomb_manpage.pdf to Nov 26, 2014.
2014-11-26 21:16:25 +00:00
Joel Montes de Oca
4ac31dad44 Updated tomb_manpage.pdf to Nov 26, 2014.
omb_manpage.pdf had not been updated for two years. This update brings
the document up to date with the latest update done to the tomb.1 man
page on November 26, 2014.
2014-11-26 16:09:40 -05:00
gdrooid
6ab73af2b1 [l10n] Updated French translations. 2014-11-26 20:54:17 +01:00
Jaromil
0d690bf142 documentation and makefile scripts updates for release 2014-11-26 20:28:28 +01:00
Jaromil
710558381f Merge pull request #168 from gdrooid/lang
[i18n] Don't localize legal output.
2014-11-26 18:38:21 +00:00
gdrooid
de65325fc3 [i18n] Don't localize legal output. 2014-11-26 19:35:47 +01:00
gdrooid
5d32bf8fa1 [l10n] Updated Spanish translations. 2014-11-26 17:54:33 +01:00
Jaromil
bbe9a49ec3 Direct handling of pinentry execution
We skip distro wrappers here since they interfere with stdin/out
As usual: better to have less intermediaries.
2014-11-26 17:45:31 +01:00
gdrooid
1ef2576b16 [l10n] Updated German, Russian and Spanish translations. 2014-11-26 17:42:08 +01:00
Jaromil
7a8a8666ba addressing comments on last commit with a few fixes 2014-11-26 17:25:47 +01:00
gdrooid
47652747c3 [l10n] Update pot file. 2014-11-25 22:51:33 +01:00
Jaromil
f218c644ab KDF key handling cleanup 2014-11-25 03:25:27 +01:00
Jaromil
5dbcabdf26 Removed old privilege escalation model
This commit refactors the handling of password input by eliminating
all intermediary programs and relying only on ZSh, hence improving
overall security against rootkits and such.

Also the way sudo is used is now greatly simplified and there is no
privilege escalation at boot: sudo is executed inside Tomb by being
prefixed in front of those programs needing it.

All tests passed.
2014-11-25 02:37:05 +01:00
Jaromil
e6075d08ce really fail to not overwrite keys when forging 2014-11-24 20:06:45 +01:00
gdrooid
fb686db8eb Finished fixing #164 2014-11-24 17:02:30 +01:00
gdrooid
9eaaa68452 [l10n] Update po files with the latest untranslated strings.
So that they coincide with the ones on POEditor for those who want to
use a different tool.
2014-11-24 16:55:22 +01:00
gdrooid
7c797f86a2 [i18n] Update .pot file. 2014-11-23 22:55:03 +01:00
gdrooid
2a675d0e69 [i18m] Fix generation of translatable strings to also include _success. 2014-11-23 22:49:06 +01:00
gdrooid
a46da1cc23 Fix #164 2014-11-23 22:47:03 +01:00
Jaromil
a6a784f1ef swish-e indexing change and whoami cleanup
swish-e now creates a .swishrc config file inside the tomb so that
users can tweak its configuration by hand.
whoami() is also cleaned up, pending a fix for slackware usage.
2014-11-23 21:53:44 +01:00
Jaromil
2480c89210 small security measure against exporting all vars 2014-11-23 18:26:06 +01:00
Jaromil
99581a5faa whitespace cleanup and correct indentation to 4 spaces (no tabs) 2014-11-23 18:25:42 +01:00
Jaromil
aba0fa5191 Avoid using a tempfile on every key decryption
A tempfile was often used by Tomb in order to parse the stderr output of
gpg and detect if the password is correct or not. The tempfile was not
holding any secret information (see #162) yet this is an improvement for
Tomb's deniability since there is now much less going on in the temp
firectory.
2014-11-23 16:58:43 +01:00
Jaromil
2c4fb4852e better changelog info 2014-11-23 16:27:09 +01:00
Jaromil
c0bd822312 fix for #165 2014-11-23 16:27:09 +01:00
Jaromil
ba39aef673 considerations on password bruteforce vulnerability on steghide 2014-11-23 15:31:14 +01:00
Jaromil
0e141abf57 manpage updates 2014-11-23 14:55:03 +01:00
Jaromil
a10d6af804 Removed handling of temporary directory
Added the --tmp flag for manual selection of the temporary directory, whose security should really be up to sysadmins when configuring operating systems. Default is ZSh TMPPREFIX usually set to /tmp/zsh which, if not existing, will be created as world writable with a sticky bit.

This commit also includes a cleanup of commandline options and a fix to swap check.
2014-11-23 14:49:41 +01:00
gdrooid
e95b32e3a3 [i18n] Updated Russian translation. 2014-11-23 09:43:23 +01:00
gdrooid
1481d1f4df [i18n] Updated Spanish translations. 2014-11-22 21:15:34 +01:00
Jaromil
a4f597d86c documentation and runtests fixes 2014-11-22 01:50:08 +01:00
Jaromil
6bb1385c69 Security fix to setkey
Now there is no more writing of cleartext secrets in any tempfile,
the last case was in setkey and is now eliminated. Tempfile creation
is cleaner. Related to issue #162
2014-11-22 01:40:26 +01:00
Jaromil
52e80b6042 correct docs on opening tombs without Tomb 2014-11-22 00:32:25 +01:00
Jaromil
f2efa69001 Read setting of pinentry-program in gpg-agent.conf
also fixes the check if the tomb is already open
2014-11-22 00:23:57 +01:00
Jaromil
0d485bf51d Documentation for -k cleartext and --unsafe 2014-11-21 22:50:45 +01:00