[Bug 877403] [NEW] crypttab LUKS password shown in cleartext

[Johannes Bauer]

Public bug reported:

After updating to 11.10, I was shocked to see that passwords that are
used for LUKS disk encryption are now shown in cleartext while entrering
them. I am not using the (incredibly stupid/ugly, BTW) splash screen,
but regular startup. It does not matter wheter framebuffer is enabled or
not. When the point comes where I should enter my password, I see the

Enter passphrase:

prompt. When I enter my password there, it appears in clear text! This
means I see

Enter passphrase: mypassubuntufuckedup1234

Only when I press enter do I see the passphrase in asterisks, i.e.

Enter passphrase: mypassubuntufuckedup1234
Enter passphrase: ************************

This is - as you can image - not very helpful (since the password is
already there in clear text).

I have this problem on one system which I upgraded from Natty and one
one fresh install that I just did.

** Affects: upstart (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: clear cryptsetup luks password plain text

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to upstart in Ubuntu.
https://bugs.launchpad.net/bugs/877403

Title:
  crypttab LUKS password shown in cleartext

Status in “upstart” package in Ubuntu:
  New

Bug description:
  After updating to 11.10, I was shocked to see that passwords that are
  used for LUKS disk encryption are now shown in cleartext while
  entrering them. I am not using the (incredibly stupid/ugly, BTW)
  splash screen, but regular startup. It does not matter wheter
  framebuffer is enabled or not. When the point comes where I should
  enter my password, I see the

  Enter passphrase:

  prompt. When I enter my password there, it appears in clear text! This
  means I see

  Enter passphrase: mypassubuntufuckedup1234

  Only when I press enter do I see the passphrase in asterisks, i.e.

  Enter passphrase: mypassubuntufuckedup1234
  Enter passphrase: ************************

  This is - as you can image - not very helpful (since the password is
  already there in clear text).

  I have this problem on one system which I upgraded from Natty and one
  one fresh install that I just did.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/877403/+subscriptions