secret-query - Ask for a secret in a secure way

secret-query [ OPTION ... ] [ QUESTION ]

The secret-query program will pop up a window, asking for the entry of a secret. It is usually called by q-agent, or q-client when no terminal interaction with the user is possible. You can use it for other things, too, as the interface is very simple, and in the default mode not specific to the Quintuple Agent suite.

If QUESTION is given, it will be used as the prompt text in the window.

All the necessary precautions are taken so that your secret stays that way while under control of secret-query: the keyboard is grabbed to prevent sniffing, an amount of memory is locked (if possible) so that paging will not write the secret to disk.

After a secret has been entered and the OK button is pressed, secret-query will output the secret to stdout, and exit with code 0.

Cancelling entry with the appropriate button or by closing the window will produce an exit code of 1.

-g, --no-global-grab

usually, as soon as the query window appears the keyboard is grabbed, diverting any keyboard input to secret-query - this option will prevent grabbing until the query window gets keyboard focus by normal means. This retains security, while doing away with the somewhat obnoxious snatching-from-under-your-fingers aspect

-e, --enhanced

turns on the enhanced interface, normally only useful to q-agent: time-to-live and other options are queried along with the secret, and later output in rfc822-like Keyword: Value style

-d, --debug

turn on debugging output

--help

print a usage synopsis, then exit

--version

print version information, then exit

q-agent(1)

q-client(1)

Robert Bihlmeyer <robbe@orcus.priv.at>

Copyright © 2000 Robert Bihlmeyer

This is free software; see the source for copying conditions. There is no warranty; not even for merchantability or fitness for a particular purpose.