BIND 10 #896: bindctl command history shows username and user name attempts

BIND 10 Development do-not-reply at isc.org
Tue May 3 18:15:02 UTC 2011


#896: bindctl command history shows username and user name attempts
---------------------------------+-----------------------------------------
            Reporter:  jreed     |                        Owner:
                Type:  defect    |                       Status:  new
            Priority:  minor     |                    Milestone:  New Tasks
           Component:  bind-ctl  |                     Keywords:
           Sensitive:  0         |              Defect Severity:  Low
         Sub-Project:  DNS       |  Feature Depending on Ticket:
Estimated Difficulty:  0         |          Add Hours to Ticket:  0
         Total Hours:  0         |                    Internal?:  0
---------------------------------+-----------------------------------------
 {{{

 Username:fhdsjkdfshjk
 Password:
 ["user doesn't exist"]
 Username:root
 Password:
 ["login success "]
 > fhdsjkdfshjk
 }}}

 The above shows attempts and then command history. Command history also
 showed the real username.

 I think this is misleading to have the username in command history.

-- 
Ticket URL: <http://bind10.isc.org/ticket/896>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list