Public bug reported:

I'm using a LUKS encrypted partition and I removed the splash option in 
/etc/default/grub as in:
GRUB_CMDLINE_LINUX_DEFAULT="quiet"

When prompted to type the password during the boot sequence to unlock
the partition the password is displayed as I type it. It is not hidden
as in "********". (screenshot#1). I press enter after typing and the the
password is displayed in clear text and hidden with "******" below.
(screenshot#2) When I shutdown the computer, as the shutdown messages
are being displayed the password is still visible on the screen
(screenshot#3). When using "quiet splash" this doesn't happen, the
password being hidden. (screenshot#4). This is a potentially security
issue because the password is visible on the screen.

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: cryptsetup 2:1.1.3-4ubuntu3
ProcVersionSignature: Ubuntu 3.2.0-14.23-generic 3.2.3
Uname: Linux 3.2.0-14-generic x86_64
ApportVersion: 1.91-0ubuntu1
Architecture: amd64
Date: Tue Feb  7 15:28:17 2012
ProcEnviron:
 LANGUAGE=en_CA:en
 PATH=(custom, no user)
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
SourcePackage: cryptsetup
UpgradeStatus: No upgrade log present (probably fresh install)
crypttab:
 # <target name>        <source device>         <key file>      <options>
 encryptedhome  /dev/disk/by-uuid/9b77e683-3802-4990-8f83-211199c2a0ac         
none         luks

** Affects: cryptsetup (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug precise running-unity

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/928465

Title:
  Password used for unlocking LUKS encrypted volume is visible when
  booting just with the 'quiet' option

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/928465/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to