Comment 0 for bug 778659

Revision history for this message
ilf (ilf) wrote :

Binary package hint: plymouth

So #566818 is fixed and plymouth no longer causes the cryptsetup passphrase prompt during boot to repeat the prompt with every character typed.

It still echoes an asterisk for every character typed. I consider this a security issue, since this reveals on the screen how many characters the passphrase consists of.

sudo and cryptsetup (and many others) do not echo anything when typing in passphrases. This is a deliberate security feature. plymouth should respect this and also not echo enything after the prompt.