http://qa.mandrakesoft.com/show_bug.cgi?id=6219
Summary: rpmdrake shows user password in /var/log/messages
Product: rpmdrake
Version: 2.1-9mdk
Platform: PC
OS/Version: All
Status: RESOLVED
Severity: normal
Priority: P2
Component: rpmdrake
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
I have the 9.2 rpms on another machine setup for ftp. When I install a program from
there
rpmdrake shows the users password in /var/log/messages. Here is an example;
t 23 10:14:39 sidney rpmdrake[5270]: Installing package
ftp://dveatch:[EMAIL
PROTECTED]//mnt/pcserver/ml92/Mandrake/RPMS/draksync-9.0-3mdk.noarch.rpm
No that's not my real password. Granted only root can view that file but I don't think
root should
be able to see that info.
------- Additional Comments From [EMAIL PROTECTED] 2003-11-03 12:37 -------
You typed root password to enter rpmdrake ya know :). So root should not see
something he entered itself? :)
Granted I'll try to fix but I don't think that's a big deal.
*** This bug has been marked as a duplicate of 6260 ***
--
Configure bugmail: http://qa.mandrakesoft.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
