Re: [Monotone-devel] [patch] add access checks for monotonerc

[Nathaniel J. Smith]

On Sat, Feb 03, 2007 at 03:03:22PM +0100, Ulf Ochsenfahrt wrote:
> Matt Johnston wrote:
> > Personally I'm not sure this is a good idea. On multi-user
> > systems, I usually make a point of keeping standard dot
> > files (.muttrc, .pwm/*, .zshrc, .ssh/config etc)
> > world-readable, as it's a useful way of teaching people how
> > to use less-known program features.
> > 
> > Maybe changing the std_hooks file to look for passwords in
> > ~/.monotone/passwords, and ensuring appropriate permissions
> > on that file (and keys themselves) would be better?
> 
> I think it would be better to allow keys without passphrases and making 
> sure the key files have appropriate permissions.

+1

get_passphrase has always been a hack.

-- Nathaniel