Feature request

Darren Tucker dtucker at zip.com.au
Tue Mar 16 13:45:12 EST 2004


Peter Stuge wrote:
> On Sun, Mar 14, 2004 at 05:55:13PM +0100, Martin Kluge wrote:
>>So would you accept a patch to add a new command line option
>>(suggestion: -d) to specify a password directly on the command line?
> 
> This has been requested before but declined because it promotes insecure
> behavior. (Your system may be isolated, but all aren't and it's usually
> possible to see any arguments of all processes in the system.)
> 
> I seem to remember discussion about accepting the password on a file
> descriptor however. Search the mailing list and bugzilla.mindrot.org.

Probably this one:
http://bugzilla.mindrot.org/show_bug.cgi?id=69

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list