pallet/pallet — Issue #99: sudo-password listed in logs
Author: jasonjckn
Created: 2011-10-23 17:06:27+00:00
State: open

this doesn't seem like a good idea. I usually direct logs to stdout, and anything looking over my shoulder could see my password on the screen.

INFO execute - Transfering commands to 10.35.10.118:sudocmd12832 : {:exit nil, :out nil}
INFO execute - Running echo "" | /usr/bin/sudo -S ./sudocmd12832
INFO execute - Output: 10.35.10.118
Last login: Sun Oct 23 17:02:37 2011 from 172.16.8.127
[jackson@smfd-akg-19-sr3 ~]$
INFO execute - Output: 10.35.10.118
echo XXXXXXX | /usr/bin/sudo -S ./sudocmd128
32;exit $?;

I noticed it gets X'd in one place but not the other.