[git] Pinentry - branch, master, updated. pinentry-1.0.0-26-gebfa54e

by Daiki Ueno cvs at cvs.gnupg.org
Wed Jul 12 21:29:57 CEST 2017


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The standard pinentry collection".

The branch, master has been updated
       via  ebfa54e6044420ae12a090cdef9df7e7b0d961d2 (commit)
      from  e57bcb7a2acff3a61a342d24e6a55407bf736631 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit ebfa54e6044420ae12a090cdef9df7e7b0d961d2
Author: Daiki Ueno <ueno at gnu.org>
Date:   Wed Jul 12 21:28:58 2017 +0200

    doc: Make Emacs frontend description more accurate
    
    * doc/pinentry.texi (Front ends): Remove false assertions on
    insecurity of Emacs, and mention allow-emacs-pinentry option of
    gpg-agent.
    
    Proofread-by: Marcus Brinkmann <mb at g10code.com>
    GnuPG-bug-id: 2034

diff --git a/doc/pinentry.texi b/doc/pinentry.texi
index 23c1c5e..44e2eb1 100644
--- a/doc/pinentry.texi
+++ b/doc/pinentry.texi
@@ -261,14 +261,12 @@ be explicitly disabled by passing @code{--disable-inside-emacs} to
 @code{configure} when building @pinentry{}.
 
 Having Emacs get the passphrase is convenient, however, it is a
-significant security risk.  Emacs keeps all key presses buffered.
-(You can see the recent key presses by typing @code{C-h l}
-(@code{view-lossage}) in emacs.)  Further, Emacs is a huge program,
-which doesn't provide any process isolation to speak of.  As such,
-having it handle the passphrase adds a huge chunk of code to the
-user's trusted computing base.  Because of this concern, Emacs doesn't
-enable this by default (the user has to run @code{(pinentry-start)},
-e.g., from his or her @code{.emacs} file, explicitly).
+significant security risk.  Emacs is a huge program, which doesn't
+provide any process isolation to speak of.  As such, having it handle
+the passphrase adds a huge chunk of code to the user's trusted computing
+base.  Because of this concern, Emacs doesn't enable this by default,
+unless the @code{allow-emacs-pinentry} option is explicitly set in his
+or her @code{.gnupg/gpg-agent.conf} file.
 
 Similar to the inside-emacs check, the @pinentry{} frontends check
 whether the @code{DISPLAY} variable is set and a working X server is

-----------------------------------------------------------------------

Summary of changes:
 doc/pinentry.texi | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)


hooks/post-receive
-- 
The standard pinentry collection
http://git.gnupg.org




More information about the Gnupg-commits mailing list