Subject: Re: Cautionary Tale: New Install/root Password/Keyboard Layout
To: None <netbsd-users@netbsd.org>
From: Christian Biere <christianbiere@gmx.de>
List: netbsd-users
Date: 07/04/2003 22:18:59
--=.tk8(UcNal9v?DU
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

felix zaslavskiy <felix@students.poly.edu> wrote:

> #chmod a-rw /dev/tty
> su unprivuser
> bash$ echo -n $'oldpass\nmypassword\nmypassword\n' | passwd

You never pass sensitive data as an argument to a command nor do
you put it into an enviroment variable. Use the `here-document`
feature of your shell.

-- 
Christian

--=.tk8(UcNal9v?DU
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (NetBSD)

iD8DBQE/BeE+0KQix3oyIMcRAkgsAKDPAhBNSaO8gmk3k7i9IQ383WD0TwCfZHf3
kW9ZYxRkH623H+bXz7/DnS8=
=PvYp
-----END PGP SIGNATURE-----

--=.tk8(UcNal9v?DU--