Your message dated Sun, 07 Apr 2013 21:05:34 -0500
with message-id <[email protected]>
has caused the   report #704229,
regarding spice-client: "-w password" (on the command line) is a security risk
to be marked as having been forwarded to the upstream software
author(s) [email protected]

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
704229: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704229
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
(If possible, please preserve the 704229-forwarded address in any replies.)

I reported the following bug to the Debian bug tracker, but realized it
should probably just be forwarded upstream.

Rob Browning <[email protected]> writes:

> Package: spice-client
> Version: 0.11.0-1
>
> I think the spice client should probably support some other way of
> specifying the password since putting it on the command line makes it
> visible to any other users on the system.
>
> A reasonable alternative might be "--password-file foo".

(cf. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=704229)

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4

--- End Message ---

Reply via email to