Page MenuHomeSolus

Password asterisks in sudo
Closed, WontfixPublic


This can be achieved by adding the following line to /etc/sudoers:

Defaults pwfeedback

Event Timeline

jwinnie8 created this task.Dec 22 2018, 3:12 AM
jwinnie8 claimed this task.Dec 22 2018, 3:52 AM
Jacalz added a subscriber: Jacalz.EditedDec 22 2018, 8:35 AM

Please no! Not displaying asterisks is the standard Unix way of doing it, if a user wants password feedback he can turn it on himself from that file.
Having this enabled is also a security issue, because anyone looking over your shoulder can see how many characters you have typed.

Basically no distribution I have ever used does this. The only gain I could possibly imagine is making sure you didn't type a wrong number of keys while entering your password, then again you could understand you did this with the re-type prompt given 2 seconds later.

It is also a security issue as Jacalz stated, albeit not a huge one.

I could imagine some users (even me) being disturbed by this asterisk feedback, as it is not the way they are used to or desire.

What exactly is the point?

JoshStrobl closed this task as Wontfix.Dec 22 2018, 9:22 AM
JoshStrobl added a subscriber: JoshStrobl.


@JoshStrobl Can we at least put it in but commented out, so it's easy to enable?

JoshStrobl added a comment.EditedDec 22 2018, 4:21 PM

No. Those that want it will already know how to add it into the file or understand that this is something obscure enough and they'd already Google it and as a result find the answer.