Bug#869773: xdm logs failed logins that may be sensitive

2017-07-28 Thread Nicolas George
Le decadi 10 thermidor, an CCXXV, Julien Cristau a écrit : > Isn't that true pretty much whichever way you log in (ssh, login, ...), > not just xdm? Probably. I just noticed it and verified it on xdm. If other login prompts have the same issue, a common solution may be better. Note that with ssh,

Bug#869773: xdm logs failed logins that may be sensitive

2017-07-28 Thread Julien Cristau
On Fri, Jul 28, 2017 at 21:06:47 +0200, Sven Joachim wrote: > The unknown username should not be in the log, login(1) replaces names > of non-existent users with "UNKNOWN" when logging failed attempts. > How about this then (not even build tested): diff --git a/greeter/greet.c b/greeter/greet.c

Bug#869773: xdm logs failed logins that may be sensitive

2017-07-28 Thread Sven Joachim
On 2017-07-28 20:49 +0200, Julien Cristau wrote: > On Wed, Jul 26, 2017 at 11:51:10 +0200, Nicolas George wrote: > >> Package: xdm >> Version: 1:1.1.11-3 >> Severity: normal >> >> Dear Maintainer, >> >> When somebody tries to log in and fails, xdm writes the given user name in >> the system logs

Bug#869773: xdm logs failed logins that may be sensitive

2017-07-28 Thread Julien Cristau
On Wed, Jul 26, 2017 at 11:51:10 +0200, Nicolas George wrote: > Package: xdm > Version: 1:1.1.11-3 > Severity: normal > > Dear Maintainer, > > When somebody tries to log in and fails, xdm writes the given user name in > the system logs. Unfortunately, typing the password in the login field is a

Bug#869773: xdm logs failed logins that may be sensitive

2017-07-28 Thread G. Branden Robinson
At 2017-07-26T11:51:10+0200, Nicolas George wrote: > Package: xdm > Version: 1:1.1.11-3 > Severity: normal > > Dear Maintainer, > > When somebody tries to log in and fails, xdm writes the given user name in > the system logs. Unfortunately, typing the password in the login field is a > common mis

Bug#869773: xdm logs failed logins that may be sensitive

2017-07-26 Thread Nicolas George
Package: xdm Version: 1:1.1.11-3 Severity: normal Dear Maintainer, When somebody tries to log in and fails, xdm writes the given user name in the system logs. Unfortunately, typing the password in the login field is a common mistake. When that happens, xdm logs it too. That leaves the password of