cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] [SECURTY] Linux eduroam-linux-IRI.sh Script

From: Laurent TOMAS <laurent.tomas AT idiap.ch>
To: cat-users AT lists.geant.org
Subject: [[cat-users]] [SECURTY] Linux eduroam-linux-IRI.sh Script
Date: Wed, 3 Oct 2018 16:38:40 +0200
Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (2048-bit key) header.d=idiap.ch
Organization: Idiap Research Institute

Suggestion:
On the linux script, it's not secure to ask password with an echo on screen.
in the script, you may use stty -echo before asking password
then stty echo after.

best regards

-TOMAS Laurent- 
Idiap Research Institute
Centre du Parc
Rue Marconi 19
CH-1920 Martigny
Tel: +41 27 721 77 11
Fax: +41 27 721 77 12
Web: http://www.idiap.ch/

[[cat-users]] [SECURTY] Linux eduroam-linux-IRI.sh Script, Laurent TOMAS, 10/03/2018
- Re: [[cat-users]] [SECURTY] Linux eduroam-linux-IRI.sh Script, Stefan Winter, 10/09/2018