2 - Copy firma script to whatever you like, e.g. /usr/local/bin and check that
it has no write permission
- 3 - Create a list-wide config file (default is /usr/local/etc/firma.conf) with
+ 3 - Create a list-wide config file (default is /etc/firma.conf) with
the common definitions for all lists,
GPG_BINARY= path to the GnuPG binary
- Use an encrypted swap memory
- Use a read-only media to store firma and its needed apps
- - Use ramdisk to FIRMA_LIST_PATH so all keys and passwords vanishes if the server friezes
+ - Use ramdisk to FIRMA_LIST_PATH so all keys and passwords vanishes if the server is shutdown
- Use a big PASSPHRASE, 25+ chars with alpha-numeric and special ascii keys
Design and features (OUTDATED)
# hardcode path to firma.conf, firma version and program name
declare -r \
- FIRMA_CONFIG_FILE="/usr/local/etc/firma.conf" \
- VERSION="0.3-CVS" \
+ FIRMA_CONFIG_FILE="/etc/firma.conf" \
+ VERSION="0.3-git" \
BASENAME="$(basename $0)"
# set environmental variables and options