DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=43941>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=43941 Summary: Security note for sshexec downgrades security Product: Ant Version: 1.7.0 Platform: Other OS/Version: other Status: NEW Severity: normal Priority: P2 Component: Optional Tasks AssignedTo: [email protected] ReportedBy: [EMAIL PROTECTED] The security note for the optional task "sshexec" advises to specify login name and password on the command line: Invoke ant with the following command line: ant -Dusername=me -Dpassword=mypassword target1 target2 This command line will be visible to users on the same machine who can retrieve a listing of currently running programs (including their command line) using "ps -elf", for example. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
