Debian bug report logs - #1251
ppp gives out password

Message received at debian-bugs:

From elmail.co.uk!richard Mon Aug 14 19:32:10 1995
Return-Path: <richard@elmail.co.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0siBnV-000BF7C; Mon, 14 Aug 95 19:32 PDT
Received: from post.elmail.co.uk (tlingit.elmail.co.uk) by pixar.com with SMTP id AA22318
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Mon, 14 Aug 1995 19:32:00 -0700
Received: from sfere.elmail.co.uk by post.elmail.co.uk (ElectricMail-MESSAGE-2.0-BETA+) id DAA11630; Tue, 15 Aug 1995 03:30:32 +0100
Received: by sfere.elmail.co.uk
	id <m0siBpH-0002QpC@sfere.elmail.co.uk>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Tue, 15 Aug 95 03:33 BST
Date: Tue, 15 Aug 95 03:33 BST
From: richard@elmail.co.uk (Richard Kettlewell)
Message-Id: <303006900822@sfere.elmail.co.uk>
To: debian-bugs@pixar.com
Subject: ppp gives out password

Package: ppp
Version: 2.1.2b-1

/etc/ppp/ppp-connect as shipped will put the PPP account's password in
a world-readable ps listing.

sfere:richard$ really ip start
starting /usr/sbin/pppd ...
sfere:richard$ ps xawu
USER       PID %CPU %MEM SIZE  RSS TTY STAT START   TIME COMMAND
[...]
root      2037  0.0  4.6  117  328 s02 S    03:26   0:00 /usr/sbin/pppd
root      2038  1.2  5.8  286  416 s02 S    03:26   0:00 sh /etc/ppp/ppp-connect
root      2039  0.4  2.0   38  148 s02 S    03:26   0:00 /usr/sbin/chat ATM0DT576815 CONNECT  ogin: sfere word: [password edited out]
sfere:richard$ 

ttfn/rjk