V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

includes/target/etc/skel/.bashrc

@@ -25,34 +25,63 @@ export PATH
 trap ' "${SHELL}" "${HOME}/.ciss/clean_logout.sh" ' 0
 . "${HOME}/.ciss/alias"
 . "${HOME}/.ciss/f2bchk.sh"
-. "${HOME}/.ciss/shortcuts"
 . "${HOME}/.ciss/scan_libwrap"
+. "${HOME}/.ciss/shortcuts"
 
 ### Preferred editor for local and remote sessions.
 export EDITOR="nano"
 
 ### History-Settings
 # -'ignoreboth' Do not put duplicate lines or lines starting with space in the history.
-# -'erasedups' Causes all previous lines matching the current line to be removed from the history list before that line is saved.
-export HISTCONTROL="erasedups"
-# The name of the file in which command history is saved. The default value is ~/.bash_history. If unset, the command history is
-# not saved when a shell exits.
+# -'erasedups' Causes all previous lines matching the current line to be removed from the history before that line is saved.
+export HISTCONTROL='ignoreboth:erasedups'
+
+# The name of the file in which command history is saved. The default value is ~/.bash_history. If unset, the command history
+# is not saved when a shell exits.
 export HISTFILE=~/.bash_history
+
 # The maximum number of lines contained in the history file.
 export HISTFILESIZE="16384"
+
 # The number of commands to remember in the command history. If the value is 0, commands are not saved in the history list.
 # Numeric values less than zero result in every command being saved on the history list (there is no limit).
 export HISTSIZE="16384"
+
 # If this variable is set, time stamps are written to the history file, so they may be preserved across shell sessions.
-export HISTTIMEFORMAT='%F %T '
+export HISTTIMEFORMAT='%F %T %z  '
+
+# Optional, cautious filters (avoids trivial leaks, but not foolproof). Caution: HISTIGNORE is coarse-grained, don't overdo it.
+export HISTIGNORE='*PASS*:*pass*:*secret*:*token*:*API_KEY*'
+
+# With only histappend, entries can be lost or merge with each other in the event of a crash or multiple sessions.
+# "-a": Appends new entries from RAM to the file.
+# "-c": Then empties only the RAM buffer. Not used here for performance reasons.
+# "-r": Loads the file back into RAM.
+__ciss_hist_pc__='history -a; history -n'
+if [[ ${PROMPT_COMMAND-} != *"history -a; history -n"* ]]; then
+  PROMPT_COMMAND="${PROMPT_COMMAND:+${PROMPT_COMMAND}; }${__ciss_hist_pc__}"
+fi
+unset __ciss_hist_pc__
+export PROMPT_COMMAND
 
 # Check the window size after each command and, if necessary, update the values of "LINES" and "COLUMNS".
 shopt -s checkwinsize
+
 # Append to the history file, don't overwrite it.
 shopt -s histappend
+
 # If set, the pattern "**" used in a pathname expansion context will match all files and zero or more directories and subdirectories.
 shopt -s globstar
 
+# Multi-line entries (line breaks using \ or via PS2) are stored in the history as a single entry.
+shopt -s cmdhist
+
+# Works in addition to cmdhist: Multi-line commands are stored in the history with real newlines, i.e., in their original format.
+shopt -s lithist
+
+# Check History permissions.
+[[ -f "${HISTFILE}" ]] && chmod 0600 "${HISTFILE}"
+
 ### Define colors for bash prompt.
 export CRED='\033[1;91m'
 export CGRE='\033[1;92m'
@@ -91,12 +120,12 @@ printf "\n"
 printf "\n"
 
 #printf "\n"
-#printf "%s🔐 Coresecret Channel Established. %s%s" "${CRED}" "${CRES}" "${NL}"
-#printf "%s✅ Welcome back %s " "${CGRE}" "${CRES}"
-#printf "%s'%s'%s" "${CMAG}" "${USER}" "${CRES}"
-#printf "%s! Type%s " "${CGRE}" "${CRES}"
-#printf "%s'celp'%s " "${CMAG}" "${CRES}"
-#printf "%sfor shortcuts. %s%s" "${CGRE}" "${CRES}" "${NL}"
+#printf "%b🔐 Coresecret Channel Established. %b%b" "${CRED}" "${CRES}" "${NL}"
+#printf "%b✅ Welcome back %b " "${CGRE}" "${CRES}"
+#printf "%b'%s'%b" "${CMAG}" "${USER}" "${CRES}"
+#printf "%b! Type%b " "${CGRE}" "${CRES}"
+#printf "%b'celp'%b " "${CMAG}" "${CRES}"
+#printf "%bfor shortcuts. %b%b" "${CGRE}" "${CRES}" "${NL}"
 #printf "\n"
 #printf "\n"