Security fix: duplicity handler used to put the gpg passphase on the command line.

[matthijs/upstream/backupninja.git] / etc / backup.d / example.dup

diff --git a/etc/backup.d/example.dup b/etc/backup.d/example.dup
index 37ca92efb9da7ea4348c51c4bdb37d7eb112d448..cd64dd5b6452deb537be5062273a74b74cc6f58e 100644 (file)
--- a/etc/backup.d/example.dup
+++ b/etc/backup.d/example.dup
@@ -15,7 +15,8 @@ nicelevel = 19
 [gpg]
 
 # passphrase needed to unlock the GnuPG key
-password = "a_very_complicated_passphrase"
+# NB: do not quote it, and it should not contain any quote
+password = a_very_complicated_passphrase
 
 # default is no, for backward compatibility with backupninja <= 0.5.
 # when set to yes, encryptkey option must be set below.