1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/plugins
patchback[bot] 56c5a8b9b2
passwordstore: Prevent using path as password (#4192) (#4217)
Given a password stored in _path/to/secret_, requesting the password
_path/to_ will literally return `path/to`. This can lead to using
weak passwords by accident/mess up logic in code, based on the
state of the password store.

This is worked around by applying the same logic `pass` uses:
If a password was returned, check if there is a .gpg file it could
have come from. If not, treat it as missing.

Fixes ansible-collections/community.general#4185

(cherry picked from commit da49c0968d)

Co-authored-by: grembo <freebsd@grem.de>
2022-02-17 21:33:09 +01:00
..
action fixed the utf-8 marker (#3162) (#3165) 2021-08-07 15:59:29 +02:00
become Update BOTMETA, fix some plugin authors, improve BOTMETA extra sanity test (#3069) (#3087) 2021-07-26 14:13:28 +02:00
cache [PR #3194/1fec1d0c backport][stable-3] Fix sanity failures (#3195) 2021-08-12 13:46:55 +02:00
callback Fix exception in the mail callback plugin (#4026) (#4063) 2022-01-20 09:30:06 +01:00
connection Get rid of distutils.spawn and distutils.util (#3934) (#3973) 2022-01-04 07:27:02 +01:00
doc_fragments Add new modules rundeck_job_run and rundeck_job_executions_info (#3521) (#3544) 2021-10-11 07:26:27 +02:00
filter Prepare for distutils.version being removed in Python 3.12 (#3936) (#3942) 2021-12-24 19:15:51 +01:00
inventory Update Proxmox Inventory Documentation with additional examples (#4148) (#4158) 2022-02-05 21:57:10 +01:00
lookup passwordstore: Prevent using path as password (#4192) (#4217) 2022-02-17 21:33:09 +01:00
module_utils Fix comment. (#3993) (#3994) 2022-01-06 15:10:46 +01:00
modules ini_file: Don't report changed=true when removing if nothing is changed. (#4155) (#4213) 2022-02-17 13:51:03 +01:00