[Bug 778659] Re: boot cryptsetup passphrase prompt echoes typed characters as stars
ilf
778659 at bugs.launchpad.net
Thu Oct 13 20:45:47 UTC 2011
OMFG. Updated another box.
It still displays a star for every character when unlocking the first (system) disk.
But it displays the plain passphrases for all my other disks after the first one!
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to plymouth in Ubuntu.
https://bugs.launchpad.net/bugs/778659
Title:
boot cryptsetup passphrase prompt echoes typed characters as stars
Status in “plymouth” package in Ubuntu:
Confirmed
Bug description:
Binary package hint: plymouth
So bug 566818 is fixed and plymouth no longer causes the cryptsetup
passphrase prompt during boot to repeat the prompt with every
character typed.
It still echoes an asterisk for every character typed. I consider this
a security issue, since this reveals on the screen how many characters
the passphrase consists of.
sudo and cryptsetup (and many others) do not echo anything when typing
in passphrases. This is a deliberate security feature. plymouth should
respect this and also not echo enything after the prompt.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/778659/+subscriptions
More information about the foundations-bugs
mailing list