[gnupg-users] xxdiff-encrypted

[David Alban]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 2004/01/21/18:27 -0500 Martin Blais <blais at furius.ca> wrote:
> i wrote a wrapper script to xxdiff, a graphical file comparison tool that i 
> wrote, that can take two encrypted files as input, decrypts them to temporary 
> files (for a short time), and launches xxdiff on them to compare their 
> plaintext contents.  all temporary files are deleted.

I don't know python, but I didn't see anything that looked like a
umask or chmod statement.  You should make sure that group and world
rwx permissions are denied for all temp files, even if they only
exist for a short time.  Does python automatically do this for temp files?

P.S.  <testimonial>
      xxdiff is truly an *amazing* tool.  If you use diff, you should
      check out xxdiff.  
      </testimonial>
- -- 
Live in a world of your own, but always welcome visitors.
                                 ***
Cave fruticem.             http://extasia.org/cave-fruticem/
Come to sig-beer-west!     http://extasia.org/sig-beer-west/
Unix sysadmin available:   http://extasia.org/resume/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAEdUJPh0M9c/OpdARAs/rAJ9KPZcd50s3a2WW3jbxS76Z4kNaoQCfYejD
j5PcePJjXH7AwfkCTJd6Ks4=
=VhZR
-----END PGP SIGNATURE-----