[Date Prev][Date Next]
Re: Password display problem with ldapmodify (ITS#363)
On Wed, 17 Nov 1999, firstname.lastname@example.org wrote:
> At 07:14 AM 11/15/99 GMT, email@example.com wrote:
> >Full_Name: Richard Ellerbrock
> >in unix speak). Well, doing a ps -ef allows anybody to see the password during
> >the update process. Have the development team thought of modifying the process
> >display to blank out the password. I have seen other applications do this -
> >MySQL is one of them.
> Thanks for the suggestion. We'll put this into the queue.
Sendmail is another such application that can modify its appearance in the
process table; problem is, not all platforms support this capability (eg.,
SunOS 4.x does, SunOS 5.x doesn't) which means you'd still need some other
method to "protect" other platforms...