secret-query1
Ask for a secret in a secure way
Usage
secret-query [OPTION ...]
[QUESTION]
Overview
The secret-query program will pop up a window, asking for the entry of a secret. It is usually called by q-agent, or q-client when no terminal interaction with the user is possible. You can use it for other things, too, as the interface is very simple, and in the default mode not specific to the Quintuple Agent suite.
If QUESTION is given, it will be used as the prompt text in the window.
All the necessary precautions are taken so that your secret stays that way while under control of secret-query: the keyboard is grabbed to prevent sniffing, an amount of memory is locked (if possible) so that paging will not write the secret to disk.
After a secret has been entered and the OK button is pressed, secret-query will output the secret to stdout, and exit with code 0.
Cancelling entry with the appropriate button or by closing the window will produce an exit code of 1.
-
-g, --no-global-grab -
usually, as soon as the query window appears the keyboard is grabbed, diverting any keyboard input to
secret-query- this option will prevent grabbing until the query window gets keyboard focus by normal means. This retains security, while doing away with the somewhat obnoxious snatching-from-under-your-fingers aspect
-
-e, --enhanced -
turns on the enhanced interface, normally only useful to
q-agent: time-to-live and other options are queried along with the secret, and later output in rfc822-like Keyword: Value style
-
-d, --debug -
turn on debugging output
-
--help -
print a usage synopsis, then exit
-
--version -
print version information, then exit
Releases
3 releases since Debian 3.0 (Woody); the text changed 1 time.