xi-keyring, branch HEADsimple and extensible alternative for gnome-keyringc486ff3137e3b2f71806c3deb2d5f17c7af668a72026-03-05T11:13:14Z2026-04-09T20:52:49Zapp_id: use pidfd to protect against data racesTobias Bengforttobias.bengfort@posteo.deapp_id: use pidfd to protect against data races
see https://github.com/swaywm/sway/pull/3088#issuecomment-456078987 for
examples of possible attacks
b8204a6d85e93d71fa3806bdd3e6fe7f58b720f52026-03-05T19:27:17Z2026-03-05T19:31:35Zadd --dump and --restore options to simplify migrationsTobias Bengforttobias.bengfort@posteo.deadd --dump and --restore options to simplify migrations
4ee1b8ee1f1c99f200ddee59cd34ffd80fd49dea2026-03-05T16:51:10Z2026-03-05T19:25:04Zadd helper to write bytes with 600 in the first placeTobias Bengforttobias.bengfort@posteo.deadd helper to write bytes with 600 in the first place
fd072bccd21dca8ae5b5ce87ec6845d8caba19e82026-03-05T14:45:51Z2026-03-05T19:14:54Zdrop support for pkbf2Tobias Bengforttobias.bengfort@posteo.dedrop support for pkbf2
5bec34d88270e3e0617daa78554e6849094257172026-03-05T14:25:27Z2026-03-05T19:14:54Zrm smoketest codeTobias Bengforttobias.bengfort@posteo.derm smoketest code
cfbf9e49c5b3f4d2926e36dfdadf72dd8951a01c2026-03-05T11:41:25Z2026-03-05T19:14:54ZlintTobias Bengforttobias.bengfort@posteo.delint
1f5798323aa5cd0d492ca48ac1dffbaa34fdd20e2026-03-03T05:35:51Z2026-03-03T05:35:51Zsystemd: tweak some settingsTobias Bengforttobias.bengfort@posteo.desystemd: tweak some settings
inspired by xdg-permission-store.service
5f63b93f9cd4bf7290d6f788329ea772a3016cd22025-02-07T15:53:28Z2025-02-07T15:53:28Zportal: close file descriptor after writingTobias Bengforttobias.bengfort@posteo.deportal: close file descriptor after writing
fixes hang in chromium
46fb2ad1d8f37dd093d9f1d22441982b651796e12024-08-17T15:09:00Z2024-08-17T15:21:40Zportal: use client supplied app_idTobias Bengforttobias.bengfort@posteo.deportal: use client supplied app_id
Saying that the request is coming from "host" in the prompt is
confusing, because it seems to imply that the app is not sandboxed.
The client supplied app_id comes from an untrusted source. Still, it is
safe to use it because:
- Requests from sandboxed applications to this interface get denied
- This interface only allows to access the secret with
application=org.freedesktop.portal.Secret
fb642beae70b0d249fe6766a06dcbe84227e1e6f2024-08-04T11:23:07Z2024-08-04T11:23:07Zreduce systemd security restrictionsTobias Bengforttobias.bengfort@posteo.dereduce systemd security restrictions
- ProtectSystem if not that relevant fo user services anyways
- Both of these options break app_id detection
f3718283f287391ed6f7370ee0105db67eb7ef952024-08-04T07:31:06Z2024-08-04T07:33:24Zuse argon2 for encryptionTobias Bengforttobias.bengfort@posteo.deuse argon2 for encryption
45f757d0a1fcd7ec699942bee88fd55c26c92df42024-08-04T06:24:00Z2024-08-04T07:31:23Zrefactor crypt to be more flexibleTobias Bengforttobias.bengfort@posteo.derefactor crypt to be more flexible
45fd19d6e80fe1318a467c8a49d14e64a01c2ef12024-08-01T12:26:28Z2024-08-01T12:26:28ZFixup: use "host" in prompts on empty app_idTobias Bengforttobias.bengfort@posteo.deFixup: use "host" in prompts on empty app_id
d0e372a3f12319b9ac1379f79fb295503bdffa912024-07-27T16:15:15Z2024-07-27T22:01:29Zuse flatpak-info for app_idTobias Bengforttobias.bengfort@posteo.deuse flatpak-info for app_id
e220d139dd2ecf3626fbac47f8d060c3903cc0872024-07-27T22:00:50Z2024-07-27T22:01:25Zrefactor: rename exe to app_idTobias Bengforttobias.bengfort@posteo.derefactor: rename exe to app_id
362344710134583725d38b47ab5453dc703e333d2024-07-27T15:48:19Z2024-07-27T22:01:06Zportal: implement org.freedesktop.impl.portal.SecretTobias Bengforttobias.bengfort@posteo.deportal: implement org.freedesktop.impl.portal.Secret
22fda93a86aef7e705a0c6857c8da49ffec9b9f72024-07-27T15:47:52Z2024-07-27T15:47:52Zdbus: resolve file descriptorsTobias Bengforttobias.bengfort@posteo.dedbus: resolve file descriptors
2e512433cdadee50d3a1b20ee03a2ad899ffa7ad2024-06-01T09:02:36Z2024-06-01T09:02:36Zdbus: do not exmit create/delete events on searchTobias Bengforttobias.bengfort@posteo.dedbus: do not exmit create/delete events on search
62d64bbe41c2f2f535429aef802007ab02ef23812024-06-01T08:59:07Z2024-06-01T09:00:29Zfix: do not unregister items from different namespacesTobias Bengforttobias.bengfort@posteo.defix: do not unregister items from different namespaces
7fa1f2d87ff9e28da4dd611df8b61e040e3fdc5f2024-06-01T06:15:20Z2024-06-01T07:51:49Zpython: do not load module from user-writable locationsTobias Bengforttobias.bengfort@posteo.depython: do not load module from user-writable locations
7346f41ebc28314231cc9f199122139403e46c292024-06-01T07:50:55Z2024-06-01T07:51:06Zprint to stderrTobias Bengforttobias.bengfort@posteo.deprint to stderr
909dc01c126ef9c94cd8c242f6ebacf19f353c102024-06-01T06:32:12Z2024-06-01T07:51:06Zsystemd: do not specify Exec in dbus serviceTobias Bengforttobias.bengfort@posteo.desystemd: do not specify Exec in dbus service
systemd activation should be used instead
see https://dbus.freedesktop.org/doc/dbus-specification.html#message-bus-starting-services
a6547605b13e784039d7d6491a0f25c4d8c557b42024-06-01T05:57:23Z2024-06-01T07:51:06Zpinentry: change title to "keyring"Tobias Bengforttobias.bengfort@posteo.depinentry: change title to "keyring"
eceb30725063041e36dc5f5c4a549ad953f5db8f2024-05-30T19:43:24Z2024-06-01T07:51:06Zdbus: close sessions on disconnectTobias Bengforttobias.bengfort@posteo.dedbus: close sessions on disconnect
13aa5c9c87164c56108ac9d6056b0c6a1df5ddba2024-05-30T12:05:27Z2024-06-01T07:51:06Zdbus: unregister sessions on closeTobias Bengforttobias.bengfort@posteo.dedbus: unregister sessions on close
493a6a2ff328a8689eebc95cf13c8b72f3f6a6e32024-05-15T21:08:02Z2024-06-01T07:51:06Zkernel_keyring: delete password from kernel keyring when no longer usedTobias Bengforttobias.bengfort@posteo.dekernel_keyring: delete password from kernel keyring when no longer used
07ef4b1db7f2d4b5c8204babbf8e59d27ac3642f2024-05-10T10:51:17Z2024-05-10T10:57:19Zonly load secrets into memory on requestsTobias Bengforttobias.bengfort@posteo.deonly load secrets into memory on requests
25cfb6114c00dbe07be55fc144d6513d6470f5b62024-05-10T10:36:17Z2024-05-10T10:51:12Zstore primary password in kernel keyringTobias Bengforttobias.bengfort@posteo.destore primary password in kernel keyring
6d9bc9fe0a96469ee864c6755c125991a8e731152024-05-10T10:15:38Z2024-05-10T10:15:38ZREADME: mention namespacesTobias Bengforttobias.bengfort@posteo.deREADME: mention namespaces
b17e0d2b8b006d299e0ac48afb3729abac0bf2352024-04-22T07:10:08Z2024-04-22T07:10:08Zsystemd: rm PrivateNetwork=yesTobias Bengforttobias.bengfort@posteo.desystemd: rm PrivateNetwork=yes
fixed "network namespace setup failed, ignoring: Operation not
permitted" warnings
d28f824ab9c6cdcd9078a0616746c47c218a114b2024-04-22T07:00:22Z2024-04-22T07:00:22Zfix: properly terminate pinentryTobias Bengforttobias.bengfort@posteo.defix: properly terminate pinentry
42fd97030bd16adbdde270e4c7b95a484962e9762024-04-21T21:12:26Z2024-04-21T21:12:26ZtypoTobias Bengforttobias.bengfort@posteo.detypo
16c6441b4b8cd41eb578f493b2f2220e326017932024-04-07T17:28:24Z2024-04-07T17:38:53Zmore descriptive error messagesTobias Bengforttobias.bengfort@posteo.demore descriptive error messages
c6af7f9f0a1cbadccb2ce7f70c509304ece03a452024-04-05T06:18:03Z2024-04-07T15:01:16Zrestrict access based on sender exeTobias Bengforttobias.bengfort@posteo.derestrict access based on sender exe
58259b8b0382a52b548bf1799564c1b058eb97b22024-04-07T14:04:09Z2024-04-07T14:52:33Zuse an encrypted json file instead of sqlite with encrypted secretsTobias Bengforttobias.bengfort@posteo.deuse an encrypted json file instead of sqlite with encrypted secrets
- pros
- meta data is encrypted
- it is more straight forward to check the password once on unlocking
- con
- all secrets are in memory when unlocked
- search performance is probably worse now
- concurrent access to the store is no longer possible
79eaa548d2b314fe4c4e5207ab85cbde86f4ebfe2024-04-07T14:12:36Z2024-04-07T14:52:21Zdo not trigger unlock on dbus initTobias Bengforttobias.bengfort@posteo.dedo not trigger unlock on dbus init
There is no reason why the items need to exist before any application
has asked for them.
2c4fb4df458f4057b8aa9b1d1c92bb04c4104cbd2024-04-07T12:41:55Z2024-04-07T12:41:55Zuse restrictive mode in key storeTobias Bengforttobias.bengfort@posteo.deuse restrictive mode in key store
a3fdef41176051ed25b34a6bb87e5bccb58a1c552024-04-05T11:06:08Z2024-04-05T11:09:09Zadd PKGBUILDTobias Bengforttobias.bengfort@posteo.deadd PKGBUILD
9085a6b9e31a33bc132eb89352f91de1c21e10e22024-04-05T10:39:40Z2024-04-05T11:09:09Zadd READMETobias Bengforttobias.bengfort@posteo.deadd README
f9fd654d2af37224709c19210ca11701cb55f6912024-04-05T09:17:44Z2024-04-05T11:09:09Zemit eventsTobias Bengforttobias.bengfort@posteo.deemit events
cce57295be2e03642fc3b1e5edddb6e63d5165782024-04-05T07:39:24Z2024-04-05T11:09:09Zrefactor: automatically update items on searchTobias Bengforttobias.bengfort@posteo.derefactor: automatically update items on search
fcf5ca215858e1cb82c529c5169f686f5640d77d2024-04-05T07:34:57Z2024-04-05T11:09:09Zrefactor: merge list_items() into search_items()Tobias Bengforttobias.bengfort@posteo.derefactor: merge list_items() into search_items()
579ccb67a83905ef6b4f24f1ed567623ad259dbd2024-04-05T07:20:04Z2024-04-05T11:09:09Zrefactor: use constants for repetetive prefixesTobias Bengforttobias.bengfort@posteo.derefactor: use constants for repetetive prefixes
d4e9faf2216bd5dd8130a7a4ef7d889d106f449d2024-04-05T07:00:20Z2024-04-05T11:09:09Zadd argparseTobias Bengforttobias.bengfort@posteo.deadd argparse
f8413417615911266cbb6b425e039a568eaad5672024-04-05T06:30:30Z2024-04-05T11:09:09Zprevent memory from being dumpedTobias Bengforttobias.bengfort@posteo.deprevent memory from being dumped
see also:
- https://www.kernel.org/doc/html/latest/admin-guide/LSM/Yama.html
- https://gitlab.gnome.org/GNOME/gnome-keyring/-/issues/5#note_264789
054bbd0a3cd6866cb5594120f0bc27e0e893ed342024-03-28T08:03:54Z2024-04-05T11:09:09ZinitTobias Bengforttobias.bengfort@posteo.deinit