emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: bug: epg send unencrypted data in trash


From: Thierry Volpiatto
Subject: Re: bug: epg send unencrypted data in trash
Date: Fri, 11 Feb 2011 19:16:13 +0100
User-agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.2.93 (gnu/linux)

Thierry Volpiatto <address@hidden> writes:

> Hi,
> i start using recently delete-by-moving-to-trash.(i had no trash before)
> So now when i decrypt a file and read it in emacs, i have an unencrypted
> file world readable 'epg-output-xxx' in the trash.
> That's bad.

So if one use gnus with a .authinfo.gpg, and use also
delete-by-moving-to-trash, he will have the bad surprise to find his
authinfo data in clear text in the trash.

Maybe let-bind delete-by-moving-to-trash in epg-delete-output-file would
be good.
It's what i will do here anyway.


(defun epg-delete-output-file (context)
  "Delete the output file of CONTEXT."
  (let ((delete-by-moving-to-trash nil))
    (when (and (epg-context-output-file context)
             (file-exists-p (epg-context-output-file context)))
      (delete-file (epg-context-output-file context)))))

With this change, data in clear text will never go to trash.

-- 
A+ Thierry
Get my Gnupg key:
gpg --keyserver pgp.mit.edu --recv-keys 59F29997 




reply via email to

[Prev in Thread] Current Thread [Next in Thread]