A revelation about revelation

Aaron Konstam akonstam at sbcglobal.net
Mon Nov 27 14:37:03 UTC 2006


It was mentioned yesterday that revelation could be used to store
passwds. I have a question about this. When I wrote a script to do this
I included a password that was needed to access the passwd database.

revelation does not have such a feature. So if  someone got root access
to your machine they could find out all your passswds.

Am I missing something? This seems like a terrible security flaw with
the program.
-- 
Aaron Konstam <akonstam at sbcglobal.net>




More information about the fedora-list mailing list