Subject: bin/19555: pppoectl requires password on command line
To: None <>
From: Christian Biere <>
List: netbsd-bugs
Date: 12/25/2002 05:36:18
>Number:         19555
>Category:       bin
>Synopsis:       pppoectl requires password on commandline
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 24 20:37:00 PST 2002
>Originator:     Christian Biere
>Release:        NetBSD 1.6K

In order to setup a PPPoE connection with pppoectl it's required to put
login and password for the account onto the command line. Actually,
this possibility should not be supported at all. This is not best known
practice and should be avoided. pppoectl should instead read the
password from a file or stdin. I assume it's a low priority security
issue because it's known and seldom a problem in most real world
configurations. Nevertheless, this should be fixed.