[Bug 2155] New: sftp program has tty attributes setting problem

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2155

            Bug ID: 2155
           Summary: sftp program has tty attributes setting problem
           Product: Portable OpenSSH
           Version: 5.3p1
          Hardware: ix86
                OS: Linux
            Status: NEW
          Severity: critical
          Priority: P5
         Component: sftp
          Assignee: unassigned-bugs at mindrot.org
          Reporter: wzis at hotmail.com

the sftp program in RHEL 6.1/6.2/6.3/6.4 has a bug in tty settings.

The 5.3p1 sftp program used in RHEL 6.1/6.2/6.3/6.4, and Ubuntu 12.04
LTS has tty attributes setting problem.

Steps to Reproduce:
1. stty -echo
2. sftp user at server
3. key in pass as prompted.
4. cd /tmp
5. ls
6. bye
7. stty -a


Actual results:
The entered sftp sub-commands in step 4 to step 6 are visible, and the
OS command entered after sftp in step 7 is also visible.


Expected results:
Those inputs entered in step 4 to step 7 shouldn't be visible.
This is for security reason we want to hide the sftp subcommands when
presented in the menu for user to get files.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.