Re: [Duplicity-talk] Why does duplicity need to access my secret key ring?

[Ben Escoto]

>>>>> "RB" == ry4an-duplicity  <address@hidden>
>>>>> wrote the following on Fri, 10 Jan 2003 16:19:44 -0600

  RB> I'm backing up using duplicity, but I'm providing a password not
  RB> associated with my public/private key pair.  Thus, so far as I
  RB> understand it, there should be no reason for gpg, and thus
  RB> duplicity, to access my secring.gpg.  I know I don't provide the
  RB> password necessary to unlock the secring.gpg, so it can't be
  RB> doing much with it.

This is probably a dumb suggestion, but is it possible you are just
backing up your .gnupg directory?

  RB> I ran a backup through strace to see if I could find the line
  RB> where gpg is exec()ed in hopes of seeing how gpg was invoked,
  RB> but since duplicity uses a python module that's dynamically
  RB> linked to gpg there's no exec().

The duplicity's gpg.py module uses the GnuPGInterface.py module
(written by Frank Tobin) which just exec's the gnupg binary.  There is
no dynamic linking.


-- 
Ben Escoto

pgp75FBJvrVtC.pgp
Description: PGP signature