[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Gosa risking passwords being logged by sudo (Was: Is LWAT completely broken in Squeeze?)



[Finn-Arne Johansen]
> Well, I had a lot of lines in the log with usernames/passwords when
> creating users. Maybe it was because I had added a user in
> /etc/sudoers ?

The fix for this is to change gosa and the hooks to pass the passwords
in the environment or using stdin, to make sure the password is not
visible in the process list nor logged by sudo.

Happy hacking,
-- 
Petter Reinholdtsen


Reply to: