GNU bug report logs - #5664
view-lossage may show passwords and sensitive information

Previous Next

Full log

View this message in rfc822 format

From: Andreas Roehler <andreas.roehler <at> online.de>
To: Chong Yidong <cyd <at> stupidchicken.com>
Cc: 5664 <at> debbugs.gnu.org
Subject: bug#5664: 23.1.92; view-lossage
Date: Sat, 06 Mar 2010 21:44:00 +0100

Chong Yidong wrote:
> Andreas Roehler <andreas.roehler <at> online.de> writes:
> 
>> emacs -q
>> M-x shell
>> /bin/su at shell prompt
>>
>> prompt for PW arrives, when PW putted in, its visible at the screen
>>
>> root-shell (bash) arrives
>>
>> M-x report-emacs-bug
>>
>> View lossage displays root-password, replaced for this report by
>> MY-PW-SHOWN-HERE
> 
> I'm afraid I can't reproduce this.  One possibility is that you are
> using a locale where the password prompt is given in a language that
> comint-watch-for-password-prompt does not recognize.  This is a known
> issue; customize comint-password-prompt-regexp to add the
> locale-dependent password prompt(s) to the list of recognized prompts.
> 

Thanks, that helps here.
However, think there is a bug though. If Emacs is able to display the prompt delivered,
it should adapt its behavior independently from the regexp already customized.

Unless some reasons contradict.

Andreas

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.