1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/changelogs/fragments
patchback[bot] 56c5a8b9b2
passwordstore: Prevent using path as password (#4192) (#4217)
Given a password stored in _path/to/secret_, requesting the password
_path/to_ will literally return `path/to`. This can lead to using
weak passwords by accident/mess up logic in code, based on the
state of the password store.

This is worked around by applying the same logic `pass` uses:
If a password was returned, check if there is a .gpg file it could
have come from. If not, treat it as missing.

Fixes ansible-collections/community.general#4185

(cherry picked from commit da49c0968d)

Co-authored-by: grembo <freebsd@grem.de>
2022-02-17 21:33:09 +01:00
..
.keep Rename changelogs/fragments/.empty -> changelogs/fragments/.keep 2020-08-07 08:17:57 +02:00
3.8.5.yml Prepare 3.8.5 release. 2022-01-30 15:17:43 +01:00
3703-force-install-homebrew-cask.yml homebrew_cask: reinstall when force is install option (#4090) (#4144) 2022-02-02 22:00:33 +01:00
3916-fix-vdo-options-type.yml vdo: Remove unused variable (#4163) (#4169) 2022-02-07 20:21:10 +01:00
3935-use-gitlab-instance-runner-to-create-runner.yml gitlab: use gitlab instance runner to create runner (#3965) (#4122) 2022-01-31 06:19:59 +01:00
4026-fix-mail-callback.yml Fix exception in the mail callback plugin (#4026) (#4063) 2022-01-20 09:30:06 +01:00
4048-expand-tilde-in-yarn-global-install-folder.yaml Actually expand ~ in yarn global install folder (#4048) (#4099) 2022-01-28 07:41:33 +01:00
4050-properly-parse-json-lines-output-from-yarn.yaml Properly parse JSON Lines output from yarn (#4050) (#4097) 2022-01-28 07:38:29 +01:00
4078-python_requirements_info.yaml python_requirements_info: don't overwrite results in 'mismatched' dict key (#4078) (#4110) 2022-01-29 15:19:47 +00:00
4151-dconf-catch-psutil-nosuchprocess.yaml dconf: Skip processes that disappeared while we inspected them (#4153) (#4181) 2022-02-10 07:29:35 +01:00
4154-ini_file_changed.yml ini_file: Don't report changed=true when removing if nothing is changed. (#4155) (#4213) 2022-02-17 13:51:03 +01:00
4192-improve-passwordstore-consistency.yml passwordstore: Prevent using path as password (#4192) (#4217) 2022-02-17 21:33:09 +01:00