tlimoncelli@stackexchange.com
9634e2424a
Fix if expression
2015-01-14 16:10:45 +00:00
Warren Gray
beefbfb912
- Fix blackbox commands so that they work when called with absolute paths.
...
- Fix confidence_test.sh so that it's not hardcoded to a specific dev environment path.
2015-01-13 14:42:58 -05:00
harrison
b8575b9c7b
Made changes as per tlimoncelli
2014-11-12 00:56:28 -08:00
harrison
26ec9319e3
blackbox_shred_all_files now changes to root dir before running. Moved similar code from blackbox_postdeploy into _blackbox_common.sh as change_to_root function.
2014-11-06 00:28:53 -08:00
harrison
8f2e8150b5
Created blackbox_cat: Decrypt a file, cat it, shred it
2014-11-06 00:19:57 -08:00
Tom Limoncelli
b5c778a08e
Be more secure in the use of "read"
2014-11-05 16:48:55 +00:00
tlimoncelli@stackexchange.com
eb96b6d1fc
Use sh-compatible version of redirection.
2014-11-05 16:48:26 +00:00
tlimoncelli@stackexchange.com
d68af832b3
Fix problem that crashes pinentry
2014-11-05 16:00:49 +00:00
Tom Limoncelli
f77303ea7d
Merge pull request #30 from bendra/master
...
adding cygwin support
2014-11-01 11:56:45 -04:00
Ben Drasin
153d34b26f
adding cygwin support
2014-10-31 15:15:33 -07:00
tlimoncelli@stackexchange.com
8b9abb271d
Add more comments
2014-10-30 14:14:12 +00:00
tlimoncelli@stackexchange.com
0fb0c0c5dd
Fix perms
2014-10-29 14:16:47 -04:00
Harrison Page
05d8c7277c
List of files to be be shredded now prints filenames
2014-10-23 16:57:04 -07:00
bendra
2f9dd20544
allow blackbox_edit to work with either encrypted or plaintext file name
2014-10-19 20:55:47 -07:00
bendra
47b9c1a4f2
fix for svnroot
2014-10-18 23:30:38 -07:00
bendra
f94b8a3764
give proper commit command
2014-10-18 10:21:17 -07:00
bendra
0c3886df65
inital checkin of svn support
2014-10-15 11:01:52 -07:00
tlimoncelli@stackexchange.com
d1a9dbcd2e
Better handle filenames with * and ? in them.
2014-10-14 14:43:03 +00:00
tlimoncelli@stackexchange.com
8a180325c1
Add TODO
2014-10-14 14:26:24 +00:00
tlimoncelli@stackexchange.com
225909cdf3
For git, add plaintext files to .gitignore to prevent accidental additions.
2014-10-14 14:23:34 +00:00
Åsmund Grammeltvedt
b003318d81
Update .gitignore when registering new files
...
To reduce the risk of accidentally adding plaintext secrets, ignore
registered plaintext files.
2014-10-13 21:31:58 +02:00
tlimoncelli@stackexchange.com
39f9ffb7df
Move code around. No changes
2014-10-13 17:26:41 +00:00
tlimoncelli@stackexchange.com
ead6e96721
Use -- to prevent potential issues with funny file names
2014-10-03 16:25:13 +00:00
Tom Limoncelli
cd2a661837
Merge pull request #22 from mavenlink/add-shred-all-files-command
...
add blackbox_shred_all_files
2014-10-03 12:22:30 -04:00
mavenlink
157dfe6d2f
cleanup some mis-named things and remove dead var
2014-10-02 17:03:49 -07:00
mavenlink
cd880e76c2
add blackbox_shred_all_files that shreds decrypted versions of any encrypted file, this will discard current changes
2014-10-02 17:02:20 -07:00
mavenlink
fe10053e63
use srm if available, this is OSX's secure remove utility
2014-10-02 16:55:54 -07:00
Tom Limoncelli
2ff15c6daf
Merge pull request #19 from christophebiocca/umask
...
Uses umask to avoid creating world-readable files.
2014-09-25 19:51:44 -04:00
Tom Limoncelli
1f38c21598
Merge pull request #17 from christophebiocca/fix-python
...
Puts parens in print call, for python3 compatibility.
2014-09-25 19:49:44 -04:00
Tom Mast
0361dc39c5
blackbox: Removed the manual gpg --import step from README, added prepare_keychain to blackbox_update_all_files
2014-09-25 15:35:45 -05:00
Tom Mast
be821148a9
blackbox: Removed homedir and updated README to add step to import pubring
2014-09-25 15:31:05 -05:00
Tom Mast
0a954752d9
blackbox: Update README, add --homedir to encryption step in _blackbox_common
2014-09-25 15:19:49 -05:00
Christophe Biocca
14edf71e83
Uses umask to avoid creating world-readable files.
2014-09-24 00:33:52 -04:00
Christophe Biocca
26800752b4
Puts parens in print call, for python3 compatibility.
2014-09-24 00:13:08 -04:00
Christophe Biocca
d453df2875
Ensure editor actually gets a filename to work with.
2014-09-23 17:24:44 -04:00
tlimoncelli@stackexchange.com
2689a2d5a4
Remove debug statement
2014-09-09 20:36:27 +00:00
tlimoncelli@stackexchange.com
389e8a7a19
BIG CHANGES:
...
* Command no longer need to be run from the base directory of the repo.
* blackbox_edit now asks "are you sure?" and is greatly simplified.
_blackbox_common.sh:
* add_filename_to_cryptlist now accepts paths relative to cwd.
* fail_if_not_on_cryptlist now accepts paths relative to cwd.
* new function: vcs_relative_path reports a path to the file relative to the REPOBASE.
* new function: is_on_cryptlist
plus...
* Some minor performance enhancesments and cleanups.
* confidence_test.sh now tests some commands while not in REPOBASE.
2014-09-09 20:32:48 +00:00
tlimoncelli@stackexchange.com
2dcb922f95
Remove duplicate file: blackbox_start
2014-09-09 20:20:45 +00:00
tlimoncelli@stackexchange.com
28bff4ff9f
Add "set -e" to all scripts.
2014-09-08 20:25:38 +00:00
tlimoncelli@stackexchange.com
3460633506
Fix _determine_vcs_base_and_type and fail_if_not_on_cryptlist
2014-09-08 20:09:04 +00:00
Lucas S. Magalhães
60b7206d8a
re-encrypt and shred after edit
2014-09-04 11:45:26 -03:00
Lucas S. Magalhães
a7baaf2e8c
blackbox_edit created
2014-09-04 11:29:23 -03:00
tlimoncelli@stackexchange.com
f222516526
* blackbox_postdeploy should accept an optional parameter for chgrp.
...
* blackbox_postdeploy should 'cd' to $BASEDIR or the base VCS directory.
* Add unit tests to confidence_test.sh to cover chgrp functionality.
2014-09-02 22:10:37 +00:00
tlimoncelli@stackexchange.com
4702a9a207
* Test use-case where secrets had previously been exposed.
...
* BUG: blackbox_postdeploy should not "chgrp" files.
2014-09-01 18:59:57 +00:00
tlimoncelli@stackexchange.com
01a9292d9d
Use a portable version of MD5.
2014-09-01 18:59:22 +00:00
Alice Example
d6a20b049f
Fix typo that makes vcs_remove fail
2014-09-01 14:26:56 -04:00
tlimoncelli@stackexchange.com
8d2e76929e
Corrected informational message
2014-08-29 20:28:08 +00:00
tlimoncelli@stackexchange.com
d74eeb33c7
* Initialization for new repos AUTOMATED.
...
* Adding new users AUTOMATED.
* Update docs for the new, more simplified installation processes.
* Remove dependency on any particular paths, etc. Copy "bin" into a place along your path and everything should "just work".
* Add support for Mercurial (not tested).
* blackbox_addadmin now adds keys to the keyring for you.
* Unified #! lines to "#!/usr/bin/env bash" so it works better on FreeBSD.
* BUGFIX: (BugId#1) blackbox_update_all_files.sh expects hg, fails for git.
* BUGFIX: (BugId#2) blackbox_postdeploy.sh assumes certain directory layout.
* BUGFIX: Temporary files aren't deleted.
* NEW FILE: bin/blackbox_initialize: Automates enabling BB for a repo (creates directories, files, and updates .gitignore).
* NEW FILE: bin/blackbox_removeadmin: Automates removing an admit.
* NEW FILE: tools/confidence_test.sh: A battery of tests to verify operations.
* NEW FILE: bin/Makefile: Automate package creation.
* NEW FILE: bin/_stack_lib.sh: A library of shell routines from StackExchange.
2014-08-29 20:21:02 +00:00
tlimoncelli@stackexchange.com
f387bc9f30
Remove ".sh" from file names.
...
Refactor so it does not rely on PWD being the repo basedir.
Fix assumptions about HG and GIT use.
2014-08-28 20:47:32 +00:00
tlimoncelli@stackexchange.com
9f78fd458b
blackbox_addadmin.sh: NEW: still untested.
...
blackbox_common.sh: Add comments.
2014-08-26 16:03:25 -04:00