[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#72863: newscache writes passwords to syslog



Package: newscache
Version: 0.99.17-1

When I use newscache to connect to remote news servers which require
authentication, newscache writes the passwords to syslog so that every
local user who has read access to syslog can read them.

I suggest to add an option "pwlog" (or so) for the newscache.conf file,
and disable that option by default. When this option is disabled,
newscache should log a dummy string instead of the real password.


-- 
Dietrich Clauß   http://www.inf.tu-dresden.de/~dc2/




Reply to: