~svmhdvn


#426 Change accounts.conf security error to a warning 29 days ago

Comment by ~svmhdvn on ~sircmpwn/aerc2

Thanks for the lists archive link, I will get to work on this patch.

#426 Change accounts.conf security error to a warning 29 days ago

Ticket created by ~svmhdvn on ~sircmpwn/aerc2

I am trying to add aerc to home-manager. When home-manager generates the aerc config, it places a read-only symlink pointing to a world-readable accounts.conf file in the nix store. However, with this method, I cannot run aerc as it returns with an error and the following message:

The file /home/xxx/.config/aerc/accounts.conf has too open permissions.
This is a security issue (it contains passwords).
To fix it, run `chmod 600 /home/xxx/.config/aerc/accounts.conf`
Failed to load config: account.conf permissions too lax

I cannot simply chmod it to the required permissions since the filesystem containing the accounts.conf file is read-only. I can also guarantee that there are no secrets in the generated accounts.conf file, since home-manager only adds a source-cred-cmd or outgoing-cred-cmd to the file.

What is the best way forward? In cases like this where the user can guarantee that there are no secrets in accounts.conf, the security error shouldn't block the user from running aerc. Instead, if it was a warning (and especially one that can be disabled somehow), that would be useful for users on other platforms.

#15 Add JMAP worker 8 months ago

Comment by ~svmhdvn on ~sircmpwn/aerc2

Would you be able to clarify why you've chosen to not have JMAP support? I'm just curious, since it seems like a beneficial feature.

#122 Add Archived-At header to list copies 10 months ago

Comment by ~svmhdvn on ~sircmpwn/lists.sr.ht

I can work on this soon if it's still relevant.

#101 Remove unidiff in favor of pygit2 10 months ago

Comment by ~svmhdvn on ~sircmpwn/lists.sr.ht

I'm working on this, will send a patch soon.