FS#20508 - bash login shows typed password in clear
Attached to Project:
Arch Linux
Opened by andrea cassioli (cassioli) - Wednesday, 18 August 2010, 21:23 GMT
Last edited by Jan de Groot (JGC) - Thursday, 19 August 2010, 09:09 GMT
Opened by andrea cassioli (cassioli) - Wednesday, 18 August 2010, 21:23 GMT
Last edited by Jan de Groot (JGC) - Thursday, 19 August 2010, 09:09 GMT
|
Details
Description:
In case the system is overheaded, say for instance for disk acces or any other resource consuming task, when I switch to console login, on any of the 6 available, the bash login takes quite long time to accept my user name. The very problem is that if I type also the password (which can happen quite commonly I guess....) it is shown in clear on the screen. Additional info: * package version(s): bash : 4.1.007-1 kernel :2.6.34.3-1 * config and/or log files etc. Steps to reproduce: run whatever heavy task, especially involing disk access, and then switch to console login, say F1, and try to login. |
This task depends upon
Closed by Jan de Groot (JGC)
Thursday, 19 August 2010, 09:09 GMT
Reason for closing: Not a bug
Additional comments about closing: See comment. If you type the password before the password prompt is shown, your password is shown in the clear. This is expected.
Thursday, 19 August 2010, 09:09 GMT
Reason for closing: Not a bug
Additional comments about closing: See comment. If you type the password before the password prompt is shown, your password is shown in the clear. This is expected.
Comment by Jan de Groot (JGC) -
Wednesday, 18 August 2010, 21:26 GMT
The problem here is that agetty hasn't processed your login, so
the prompt security settings haven't been applied yet. If you
already start typing then, you'll get the password on screen. This
is not something that can be fixed, as there's no way to get
agetty to disable password echoing until it knows it's waiting for
password input.