redact_pass.txt (1540B)
1 *redact_pass.txt* For Vim version 6.0 Last change: 2018 June 24 2 3 DESCRIPTION *redact_pass* 4 5 This plugin switches off the 'viminfo', 'backup', 'writebackup', 'swapfile', 6 and 'undofile' options globally when editing a password in `pass(1)`. 7 8 This is to prevent anyone being able to extract passwords from your Vim cache 9 files in the event of a compromise. 10 11 You should test this after installation to ensure you see this message is 12 printed whenever you `pass edit`: 13 14 > Editing password file--disabled leaky options! 15 16 REQUIREMENTS *redact_pass-requirements* 17 18 This plugin is only available if 'compatible' is not set. It also requires the 19 |+autocmd| feature. 20 21 IMPLEMENTATION *redact_pass-implementation* 22 23 The options are disabled globally rather than attempting to set them local to 24 the buffer only, which was the flawed approach of previous versions. This is 25 mostly because of the 'viminfo' option; it's global, and there's no meaningful 26 way to exclude information from the sensitive buffer from appearing in it. 27 28 Because the typical use case for editing a password file in Vim is that you 29 load and change a single short document, and then quit, it's more sensible to 30 just turn the relevant options off completely, and makes what the plugin is 31 doing more reliable and straightforward to understand. 32 33 AUTHOR *redact_pass-author* 34 35 Written and maintained by Tom Ryder <tom@sanctum.geek.nz>. 36 37 LICENSE *redact_pass-license* 38 39 Licensed for distribution under the same terms as the pass(1) project. 40 41 vim:tw=78:ts=8:ft=help:norl: