This file is indexed.

/usr/share/monotone/hooks/get_passphrase_from_file.lua is in monotone-extras 1.1-4+deb8u2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
-- This hook reads the 'passphrases' file from the confdir.  It expects the
-- file to be formatted as follows:
--
-- key@domain.tld "passphrase here"
--
-- One entry per line.  The quotes are required.
--
-- Note: Because the file contains passphrases it should only be readable by
-- select users.
function get_passphrase (keypair_id)
   local permfile = io.open(get_confdir() .. "/passphrases", "r")
   if (permfile == nil) then return false end
   local line = permfile:read()
   while (line ~= nil) do
      local _, _, key, passphrase = string.find(line, "%s*([^%s]*)%s*\"(.*)\"%s*")
      if keypair_id.given_name == key then return passphrase end
      line = permfile:read()
   end
   io.close(permfile)
   return false
end