Page MenuHomeSolus

Password asterisks in sudo
Closed, WontfixPublic

Description

This can be achieved by adding the following line to /etc/sudoers:

Defaults pwfeedback

Event Timeline

Please no! Not displaying asterisks is the standard Unix way of doing it, if a user wants password feedback he can turn it on himself from that file.
Having this enabled is also a security issue, because anyone looking over your shoulder can see how many characters you have typed.

Basically no distribution I have ever used does this. The only gain I could possibly imagine is making sure you didn't type a wrong number of keys while entering your password, then again you could understand you did this with the re-type prompt given 2 seconds later.

It is also a security issue as Jacalz stated, albeit not a huge one.

I could imagine some users (even me) being disturbed by this asterisk feedback, as it is not the way they are used to or desire.

What exactly is the point?

@JoshStrobl Can we at least put it in but commented out, so it's easy to enable?

No. Those that want it will already know how to add it into the file or understand that this is something obscure enough and they'd already Google it and as a result find the answer.