Package: davfs2
Version: 1.5.2-1
Severity: wishlist

Right now there are two ways of sending the password to the WebDAV
server: the secrets file and the clunky username=foo mount option.

The former I would rather avoid because I do not want to store the
password (in cleartext!!) on disk.

The latter currently echoes the password on standard output when
prompting, which allow for shoulder surfing.

So basically, there is currently no secure way to use this command
right now.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages davfs2 depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.53
ii  libc6                  2.19-11
ii  libneon27              0.30.0-4

davfs2 recommends no packages.

davfs2 suggests no packages.

-- Configuration Files:
/etc/davfs2/secrets [Errno 13] Permission denied: u'/etc/davfs2/secrets'

-- debconf information:
* davfs2/suid_file: false
  davfs2/group_name: davfs2
  davfs2/user_name: davfs2
  davfs2/new_group: true
  davfs2/new_user: true
  davfs2/non_root_users_confimed:


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to