On 09/19/2011 04:25 PM, Ansgar Burchardt wrote:
> reopen 566654
> found 566654 0.34.1-1
> thanks
>
> * New upstream version with lots of security fixes:
> - Passwords are now hashed (Closes: #566654).
>
> Aren't that the passwords in the database (which is a different bug)?
>
> Regards,
> Ansgar
Correct, that's a mistake closing the wrong bug.
I think I will save a SHA1 hash of the password in there instead, as you
suggested. Do you have any clue how do this in the shell, without
passing it as argument on the shell? Otherwise I could do:
mysql --defaults-file=/etc/mysql/debian.cnf \
--execute="SELECT SHA1('xxxx')" | tail -n1
but that isn't safe, since a ps will tell what password is being set...
Thomas
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
