I was thinking of something simpler: mutt spawns a suid program called
muttpgphelper, say, and gives the passphrase to this program. When
mutt wants to invoke gnupg it sends a request down a pipe to
muttpgphelper which then invokes gnupg and gives the passphrase to
gnupg down another pipe.

pgp_timeout could be implemented by muttpgphelper calling alarm() ...

Edmund

Reply via email to