Block a user
ssh to: the derived key is never offered when the user's ssh config has IdentitiesOnly yes
Turn IdentitiesOnly off for ssh to (closes #74)
Walk an operand nested on another filesystem with -x (closes #106)
- New
TestScanOneFilesystemWalksNestedFileOperandgoes throughsyncOneFilesystem, gives the covering operand a device no directory here is on so its walk does not enter the file's directory,…
Hold the encrypt and decrypt result in memory until it is written (closes #143)
Rework:
- A symbolic link to a file that does not exist yet now creates that file and keeps the link, following a chain of links to its end; a link that cannot be followed, such as one pointing…
A page with an opaque origin is treated as a site named null
sneak/AutistMask#560 refuses a request whose reported origin is "null" with 4100 before any method is handled, so no prompt opens, and does not credit it to the site…
age encrypt and age decrypt check the -o path only after the mnemonic has been read
fix: a page with an opaque origin is refused, not treated as a site (closes #527)
Arguments are checked only after the mnemonic has been read
Check arguments before looking for the mnemonic (closes #79)
Make another unlocker current when the current one is removed
Rework, rebased onto next:
- Both removal paths now take the first other unlocker of type
passphraseorpgp, the typessecret unlocker selectaccepts, from one helper, `firstOtherUnlocker…
Walk an operand nested on another filesystem with -x (closes #106)
scan.go:248-251,scan_test.go: no test covers a regular-file operand that is kept because its directory is on a different filesystem than the operand covering it.README.md:401-404,…
Ask for the passphrase on the controlling terminal, not stdin