[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: documentation/3705: adduser documentation
The following reply was made to PR documentation/3705; it has been noted by GNATS.
From: Tom Cosgrove <tom.cosgrove@arches-consulting.com>
To: <gnats@openbsd.org>
Cc:
Subject: Re: documentation/3705: adduser documentation
Date: Tue, 9 Mar 2004 14:16:57 +0000 (GMT)
>>> Morgreh Loneda 9-Mar-04 03:14 >>>
:
> >Synopsis: adduser man page -unencryption option description is
> >incorrect
:
> >Description:
>
> man adduser
> -unencrypted description currently states "Causes the program
> to assume the password given in batch mode is unencrypted. The
> password will be encrypted before it's added to the password
> file. Use of this option will leave username and cleartext
> password displayable for any user."
This is correct. The parameters are visible in the process list.
> In fact, I believe the last sentence should be something more to
> the effect of, "Failure to use this option in batch more will leave
> username and cleartext password displayable for any user in the
> /etc/passwd file."
No, because without this option the password should be supplied in
encrypted form, as made clear by the man page:
By default the password is assumed to already be properly encrypted.
Thanks
Tom