GNU bug report logs - #5664
view-lossage may show passwords and sensitive information

Previous Next

Package: emacs;

Reported by: Andreas Roehler <andreas.roehler <at> online.de>

Date: Mon, 1 Mar 2010 08:17:02 UTC

Severity: normal

Done: Michael Albinus <michael.albinus <at> gmx.de>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Andreas Röhler <andreas.roehler <at> easy-emacs.de>
To: Stefan Monnier <monnier <at> iro.umontreal.ca>
Cc: Chong Yidong <cyd <at> stupidchicken.com>, 5664 <at> debbugs.gnu.org, thierry.volpiatto <at> gmail.com
Subject: bug#5664: 23.1.92; view-lossage
Date: Sun, 07 Mar 2010 16:18:46 +0100

Stefan Monnier wrote:
>>> Emacs has no idea that the string it receives from the underlying
>>> process is a prompt for a password. 
>> Hhm, the shell itself seems to know.
> 
> No, the shell has no idea either.
> 
> 
>         Stefan
> 
> 
> 
> 
> 

So let me put it that way:

If the shell grabs the pw-prompt from some place, set by `LC_ALL' or whatever,
emacs may pick up it right there.

Andreas
This bug report was last modified 11 years and 120 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.