Package: transmission-daemon
Version: 1.77-1
Severity: normal
The Transmission daemon uses recommends setting a password as standard.
However, since it's passed as an argument it's displayed in the process
overview for the whole runtime of the daemon and is thus visible for
any local user.
Ideally Transmission should read the password from a textfile to which
a --passwordfile argument points to.
If passing the password in clear text should still be possible, it should
at least rewrite the argv to "x" or something similar.
Cheers,
Moritz
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: LANG=C, lc_ctype=de_de.iso-8859...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
