[Bug 778659] Re: boot cryptsetup passphrase prompt echoes typed characters as stars
papukaija
778659 at bugs.launchpad.net
Fri Jul 15 16:09:09 UTC 2011
** Description changed:
Binary package hint: plymouth
- So #566818 is fixed and plymouth no longer causes the cryptsetup
+ So bug 566818 is fixed and plymouth no longer causes the cryptsetup
passphrase prompt during boot to repeat the prompt with every character
typed.
It still echoes an asterisk for every character typed. I consider this a
security issue, since this reveals on the screen how many characters the
passphrase consists of.
sudo and cryptsetup (and many others) do not echo anything when typing
in passphrases. This is a deliberate security feature. plymouth should
respect this and also not echo enything after the prompt.
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to plymouth in Ubuntu.
https://bugs.launchpad.net/bugs/778659
Title:
boot cryptsetup passphrase prompt echoes typed characters as stars
Status in “plymouth” package in Ubuntu:
Confirmed
Bug description:
Binary package hint: plymouth
So bug 566818 is fixed and plymouth no longer causes the cryptsetup
passphrase prompt during boot to repeat the prompt with every
character typed.
It still echoes an asterisk for every character typed. I consider this
a security issue, since this reveals on the screen how many characters
the passphrase consists of.
sudo and cryptsetup (and many others) do not echo anything when typing
in passphrases. This is a deliberate security feature. plymouth should
respect this and also not echo enything after the prompt.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/778659/+subscriptions
More information about the foundations-bugs
mailing list