From owner-freebsd-bugs@FreeBSD.ORG Sat May 30 22:50:06 2009 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E1F46106566B for ; Sat, 30 May 2009 22:50:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id B5A028FC1B for ; Sat, 30 May 2009 22:50:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n4UMo6Xb069304 for ; Sat, 30 May 2009 22:50:06 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n4UMo6TT069303; Sat, 30 May 2009 22:50:06 GMT (envelope-from gnats) Date: Sat, 30 May 2009 22:50:06 GMT Message-Id: <200905302250.n4UMo6TT069303@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Jilles Tjoelker Cc: Subject: Re: bin/69398: [patch] login(1) cleartext display of password in login.c X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Jilles Tjoelker List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 May 2009 22:50:07 -0000 The following reply was made to PR bin/69398; it has been noted by GNATS. From: Jilles Tjoelker To: bug-followup@FreeBSD.org, marc@bruenink.de Cc: Subject: Re: bin/69398: [patch] login(1) cleartext display of password in login.c Date: Sun, 31 May 2009 00:46:38 +0200 Your patch makes the problematic time shorter but does not eliminate it. Letters typed before the code you are adding to login(1) is executed are still shown. There are also various other password prompts that cannot be fixed for this, such as the one from ssh(1). -- Jilles Tjoelker