FS#20508 - bash login shows typed password in clear

Attached to Project: Arch Linux
Opened by andrea cassioli (cassioli) - Wednesday, 18 August 2010, 21:23 GMT
Last edited by Jan de Groot (JGC) - Thursday, 19 August 2010, 09:09 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture i686
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
In case the system is overheaded, say for instance for disk acces or any other resource consuming task, when I switch to console login, on any of the 6 available, the bash login takes quite long time to accept my user name. The very problem is that if I type also the password (which can happen quite commonly I guess....) it is shown in clear on the screen.


Additional info:
* package version(s):
bash : 4.1.007-1
kernel :2.6.34.3-1

* config and/or log files etc.


Steps to reproduce: run whatever heavy task, especially involing disk access, and then switch to console login, say F1, and try to login.
This task depends upon

Closed by  Jan de Groot (JGC)
Thursday, 19 August 2010, 09:09 GMT
Reason for closing:  Not a bug
Additional comments about closing:  See comment. If you type the password before the password prompt is shown, your password is shown in the clear. This is expected.
Comment by Jan de Groot (JGC) - Wednesday, 18 August 2010, 21:26 GMT
The problem here is that agetty hasn't processed your login, so the prompt security settings haven't been applied yet. If you already start typing then, you'll get the password on screen. This is not something that can be fixed, as there's no way to get agetty to disable password echoing until it knows it's waiting for password input.

Loading...