[Bug 975199] Re: term.log is world readable and shouldn't be

[Mikko Rantalainen]

Why does this log include user input in the first case? I can somewhat
understand logging all output but why does the log include input also?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/975199

Title:
  term.log is world readable and shouldn't be

Status in “apt” package in Ubuntu:
  Fix Released
Status in “apt” source package in Oneiric:
  Fix Released
Status in “apt” source package in Precise:
  Fix Released
Status in “apt” source package in Quantal:
  Fix Released
Status in “apt” source package in Raring:
  Fix Released

Bug description:
  | root at dziban:/etc# ls -l /var/log/apt/term.log*
  | -rw-r--r-- 1 root adm 87718 Apr  6 10:33 /var/log/apt/term.log

  This file includes anything you type into a shell spawned via dpkg's
  conffile handling.  I don't expect my root shell sessions to be logged
  (keystrokes and all) to a world readable file and I imagine I'm not
  the only one.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/975199/+subscriptions