Bug#448754: /usr/bin/htpasswd: please give batchable option
htpasswd is missing a feature there to get the password from a file
descriptor.
What the manpage means is probably that one should use -b only when
necessary. From a shell script the use of -b might be acceptable
because the password will not be put into .bash_history and htpasswd
runs only for a very short time (so it's difficult to get the
password with ps).
A real workaround would be to feed the password to htpasswd with socat
(search for ssh in the socat man page for an example), but this is
IMHO not suitable for a postinst because of the added dependency.
Cheers,
Stefan
Reply to: