[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: unsafe use of gpg



Hallo,

2012-12-15 um 17:12:54 schrieb Peter Samuelson:
> You're right, in gpgv, it appears you _can't_ suppress the default
> keyring, ~/.gnupg/trustedkeys.gpg.  So either ensure that this file
> does not exist, or set HOME or GNUPGHOME or --homedir to a location
> where it will not exist.

$ strace gpgv foo.sign 2>&1 | grep ^open.*gpg
open("/home/timo/.gnupg/trustedkeys.gpg", O_RDONLY) = 3
open("/home/timo/.gnupg/trustedkeys.gpg", O_RDONLY) = 5
$ strace gpgv --keyring pubring.gpg foo.sign 2>&1 | grep ^open.*gpg
open("/home/timo/.gnupg/pubring.gpg", O_RDONLY) = 3
open("/home/timo/.gnupg/pubring.gpg", O_RDONLY) = 5
open("/home/timo/.gnupg/pubring.gpg", O_RDONLY) = 6

That's exactly the behaviour described in the manpage:
> By default it uses a keyring named ‘trustedkeys.gpg’ which is assumed to be
> in the home directory as defined by GnuPG or  set by an option or an
> environment variable. An option may be used to specify another keyring or
> even multiple keyrings.


Grüße
Timo

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: