fre 17 jan. 2025 kl. 18:43 skrev Nathan Hartman <hartman.nat...@gmail.com>:

> I don't know whether GPG-Agent can be configured to unlock
> automatically at startup. (That probably would bring us back to the
> issue of how to securely store the pin that would unlock it
> automatically; it would probably end up being in plaintext, in which
> case, you might as well just store the SVN password in plaintext.
> Somewhere along the line, something either needs to be in plaintext or
> entered manually at each startup.)


I believe the key here is unlocking at _login_ compared to on _boot_. If I
understand the links (but I only read it quickly) the idea was to chain a
pam module into the authentication to unlock the keychain (which require
the same password for the account as for the keychain). It would work very
much as Windows’ password store.

Cheers
Daniel

Reply via email to