A revelation about revelation
Aaron Konstam
akonstam at sbcglobal.net
Mon Nov 27 14:37:03 UTC 2006
It was mentioned yesterday that revelation could be used to store
passwds. I have a question about this. When I wrote a script to do this
I included a password that was needed to access the passwd database.
revelation does not have such a feature. So if someone got root access
to your machine they could find out all your passswds.
Am I missing something? This seems like a terrible security flaw with
the program.
--
Aaron Konstam <akonstam at sbcglobal.net>
More information about the fedora-list
mailing list