V8.13.192.2025.10.18

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/includes.chroot/root/.bashrc

@@ -33,18 +33,26 @@ source /root/.ciss/scan_libwrap
 ### Preferred editor for local and remote sessions.
 export EDITOR="nano"
 
-# Optional, cautious filters (avoids trivial leaks, but not foolproof). Caution: HISTIGNORE is coarse-grained, don't overdo it.
-export HISTIGNORE='*PASS*:*pass*:*secret*:*token*:*API_KEY*:*'
+### History-Settings
+# The name of the file in which command history is saved. The default value is ~/.bash_history. If unset, the command history
+# is not saved when a shell exits.
+export HISTFILE="${XDG_STATE_HOME}/bash/history"
+
+touch "${HISTFILE}"
+chmod 0660 "${HISTFILE}"
+chown root:root "${HISTFILE}"
 
-### History
-touch /tmp/.bash_history
-chmod 0600 /tmp/.bash_history
-chown root:root /tmp/.bash_history
-export HISTFILE=/tmp/.bash_history
 export HISTSIZE=2048
 export HISTFILESIZE=2048
 shopt -s histappend
 
+# Optional, cautious filters (avoids trivial leaks, but not foolproof). Caution: HISTIGNORE is coarse-grained, don't overdo it.
+export HISTIGNORE='*PASS*:*pass*:*secret*:*token*:*API_KEY*'
+
+# -'ignoreboth' Do not put duplicate lines or lines starting with space in the history.
+# -'erasedups' Causes all previous lines matching the current line to be removed from the history before that line is saved.
+export HISTCONTROL='ignoreboth:erasedups'
+
 ### Define colors for bash prompt
 export CRED='\033[1;91m'
 export CGRE='\033[1;92m'