Public bug reported:
data/package-hooks/source_ubiquity.py contains the following:
if os.path.exists('/var/log/installer/debug'):
response = ui.yesno("The debug log file from your installation would
help us a lot but includes the password you used for your user when installing
Ubuntu. Do you want to include this log file?")
This gives users who are filing installation bugs the impression that
their password is being logged in clear text to a log file. This is only
the case if ubiquity is being run in debugging mode, not during normal
operation.
The apport hook should determine if the debug file actually contains
debugging information before prompting the user with this scary error
message.
** Affects: apport (Ubuntu)
Importance: Undecided
Status: New
** Tags: rls-t-incoming
** Tags added: rls-t-incoming
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1257159
Title:
ubiquity apport hook shouldn't suggest password is in log file
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1257159/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
