** Also affects: apport (Ubuntu Trusty)
Importance: Medium
Assignee: Brian Murray (brian-murray)
Status: In Progress
** Tags removed: rls-t-incoming
** Tags added: trusty
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to apport in Ubuntu.
https://bugs.launchpad.net/bugs/1257159
Title:
ubiquity apport hook shouldn't suggest password is in log file
Status in “apport” package in Ubuntu:
In Progress
Status in “apport” source package in Trusty:
In Progress
Bug description:
data/package-hooks/source_ubiquity.py contains the following:
if os.path.exists('/var/log/installer/debug'):
response = ui.yesno("The debug log file from your installation would
help us a lot but includes the password you used for your user when installing
Ubuntu. Do you want to include this log file?")
This gives users who are filing installation bugs the impression that
their password is being logged in clear text to a log file. This is
only the case if ubiquity is being run in debugging mode, not during
normal operation.
The apport hook should determine if the debug file actually contains
debugging information before prompting the user with this scary error
message.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1257159/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
