Marcus Meissner
b4e8b7fb1e
- upgrade to 2.1.0 (modern)
- The file "secring.gpg" is not anymore used to store the secret
keys. Merging of secret keys is now supported.
- All support for PGP-2 keys has been removed for security reasons.
- The standard key generation interface is now much leaner. This
will help a new user to quickly generate a suitable key.
- Support for Elliptic Curve Cryptography (ECC) is now available.
- Commands to create and sign keys from the command line without any
extra prompts are now available.
- The Pinentry may now show the new passphrase entry and the
passphrase confirmation entry in one dialog.
- There is no more need to manually start the gpg-agent. It is now
started by any part of GnuPG as needed.
- Problems with importing keys with the same long key id have been
addressed.
- The Dirmngr is now part of GnuPG proper and also takes care of
accessing keyserver.
- Keyserver pools are now handled in a smarter way.
- A new format for locally storing the public keys is now used.
This considerable speeds up operations on large keyrings.
- Revocation certificates are now created by default.
- Card support has been updated, new readers and token types are
supported.
- The format of the key listing has been changed to better identify
the properties of a key.
- The gpg-agent may now be used on Windows as a Pageant replacement
for Putty in the same way it is used for years on Unix as
ssh-agent replacement.
- Creation of X.509 certificates has been improved. It is now also
possible to export them directly in PKCS#8 and PEM format for use
OBS-URL: https://build.opensuse.org/request/show/260826
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=79
44 lines
1.5 KiB
Diff
44 lines
1.5 KiB
Diff
Index: gnupg-2.1.0/g10/plaintext.c
|
|
===================================================================
|
|
--- gnupg-2.1.0.orig/g10/plaintext.c 2014-11-07 11:35:18.100563974 +0100
|
|
+++ gnupg-2.1.0/g10/plaintext.c 2014-11-07 16:51:59.919347340 +0100
|
|
@@ -25,6 +25,7 @@
|
|
#include <errno.h>
|
|
#include <assert.h>
|
|
#include <sys/types.h>
|
|
+#include <sys/stat.h>
|
|
#ifdef HAVE_DOSISH_SYSTEM
|
|
# include <fcntl.h> /* for setmode() */
|
|
#endif
|
|
@@ -39,6 +40,9 @@
|
|
#include "status.h"
|
|
#include "i18n.h"
|
|
|
|
+/* define safe permissions for creating plaintext files */
|
|
+#define GPG_SAFE_PERMS (S_IRUSR | S_IWUSR)
|
|
+#define GPG_SAFE_UMASK (0777 & ~GPG_SAFE_PERMS)
|
|
|
|
/* Handle a plaintext packet. If MFX is not NULL, update the MDs
|
|
* Note: We should have used the filter stuff here, but we have to add
|
|
@@ -169,11 +173,15 @@ handle_plaintext (PKT_plaintext * pt, md
|
|
log_error (_("error creating '%s': %s\n"), fname, gpg_strerror (err));
|
|
goto leave;
|
|
}
|
|
- else if (!(fp = es_fopen (fname, "wb")))
|
|
- {
|
|
- err = gpg_error_from_syserror ();
|
|
- log_error (_("error creating '%s': %s\n"), fname, gpg_strerror (err));
|
|
- goto leave;
|
|
+ else {
|
|
+ mode_t saved_umask = umask(GPG_SAFE_UMASK);
|
|
+ if( !(fp = es_fopen(fname,"wb")) ) {
|
|
+ err = gpg_error_from_syserror ();
|
|
+ log_error(_("error creating `%s': %s\n"), fname, strerror(errno) );
|
|
+ umask(saved_umask);
|
|
+ goto leave;
|
|
+ }
|
|
+ umask(saved_umask);
|
|
}
|
|
#else /* __riscos__ */
|
|
/* If no output filename was given, i.e. we constructed it, convert
|