bin/69398: [patch] login(1) cleartext display of password in login.c

Jilles Tjoelker jilles at stack.nl
Sat May 30 22:50:07 UTC 2009


The following reply was made to PR bin/69398; it has been noted by GNATS.

From: Jilles Tjoelker <jilles at stack.nl>
To: bug-followup at FreeBSD.org, marc at bruenink.de
Cc:  
Subject: Re: bin/69398: [patch] login(1) cleartext display of password in
	login.c
Date: Sun, 31 May 2009 00:46:38 +0200

 Your patch makes the problematic time shorter but does not eliminate it.
 Letters typed before the code you are adding to login(1) is executed are
 still shown.
 
 There are also various other password prompts that cannot be fixed for
 this, such as the one from ssh(1).
 
 -- 
 Jilles Tjoelker


More information about the freebsd-bugs mailing list