[Bug 778659] Re: boot cryptsetup passphrase prompt echoes typed characters as stars

ilf 778659 at bugs.launchpad.net
Thu Oct 13 20:45:47 UTC 2011


OMFG. Updated another box.
It still displays a star for every character when unlocking the first (system) disk.
But it displays the plain passphrases for all my other disks after the first one!

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to plymouth in Ubuntu.
https://bugs.launchpad.net/bugs/778659

Title:
  boot cryptsetup passphrase prompt echoes typed characters as stars

Status in “plymouth” package in Ubuntu:
  Confirmed

Bug description:
  Binary package hint: plymouth

  So bug 566818 is fixed and plymouth no longer causes the cryptsetup
  passphrase prompt during boot to repeat the prompt with every
  character typed.

  It still echoes an asterisk for every character typed. I consider this
  a security issue, since this reveals on the screen how many characters
  the passphrase consists of.

  sudo and cryptsetup (and many others) do not echo anything when typing
  in passphrases. This is a deliberate security feature. plymouth should
  respect this and also not echo enything after the prompt.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/778659/+subscriptions




More information about the foundations-bugs mailing list