[pass] Extending pass with user-defined hooks / add ons

Lenz Weber mail at lenzw.de
Sat Aug 1 16:58:15 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
It may be a good idea to require those hooks to be GPG-signed by the pass user to avoid malicious additions to the git repo.

Am 01.08.2015 um 12:42 schrieb Steffen Vogel:
> Hi,
>
>> What about a system similar to Git[1] where subcommands are just
>> exectuables in your $PATH?
>
> Having a „pass-age“ sub-command somewhere in $PATH:~/.password-store/.hooks/ ?
> Thats a nice idea :-) I like it.
>
>> This has some benefits over keeping commands in your password store:
>>
>> * pass doesn't have to care about special or "blessed" directories
>> * Subcommands can be written in any language
>> * It's easy for third party packages to add new commands
>>
>> Plus if you want to keep your passwords and custom commands together you
>> can add ~/.password-store/.hooks (or whatever it may be) to your $PATH.
>
> Convinced :-) I’d like to keep the addons together with my passwords.
> This way, I can sync my add ons using „pass git pull“.
>
> I would say, that we should agree to a hidden subdir in ~/.password-store which gets automatically added to $PATH by pass.
>
> Some proposals (which one do you like?)
>
>     ~/.password-store/.hooks/
>     ~/.password-store/.addons/
>     ~/.password-store/.plugins/
>     ~/.password-store/.subcommands/
>     ~/.password-store/.extensions/
>
> Kind Regards,
>
> Steffen
>
> PS: I will prepare a patch soon (tm).
>
>>
> Steffen Vogel
> Robensstraße 69
> 52070 Aachen
>
> Mail: post at steffenvogel.de
> Mobil: +49 1575 7180927
> Web: http://www.steffenvogel.de
> Jabber: steffen.vogel at jabber.rwth-aachen.de
>
>
>
> _______________________________________________
> Password-Store mailing list
> Password-Store at lists.zx2c4.com
> http://lists.zx2c4.com/mailman/listinfo/password-store

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJVvN55AAoJED87gGHnFM0sVkEH/2rowojY7ipv95xCW4phzYNK
f9Ab5RSlAUP8yLdiBWck+rJ788W1/v4gKFSitKytuOSgN/PVZRS7IN/Kaza2RdGv
sX/stzL5jirvVfxga28u71xjk+DnQx8y+ImUOYiB3eGz6W59AZh0l9IOAfnlbFTo
Nt/ZN/7XXYLJJdsQTDPO79oZFkNnTsK9q9FED8YGEpN7KyeE7g1bVeFATMdEfhze
t39Xb6RTFPMwPudID1rQTmAsrPJ315ihgja/66UM3oW9eEXbXXAEIFZPbXp6+b3d
fJU0f0KL8tAWpqMajh+1ztzWJBfeR60P4/QqT3X4lLBFacP4g7ON7i91e3Rx184=
=ddwE
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20150801/7d5164cc/attachment.html>


More information about the Password-Store mailing list