@purpleidea @miek @federicomena I’ve seen that exact same bug somewhere before… either original sudo or systemd. From what I recall it isn’t considered fixable and wasn’t issued a CVE.
@purpleidea @federicomena @miek in front of a computer now. Just checked: it's systemd. If you kill the process before submitting the typed password:
$ systemctl daemon-reload
==== AUTHENTICATING FOR org.freedesktop.systemd1.reload-daemon ====
Authentication is required to reload the systemd state.
Authenticating as: Jonathan Dowland,,, (jon)
Password: Terminated
$ the password I wrote but did not submit is echoed here
- replies
- 1
- announces
- 2
- likes
- 2
@purpleidea @miek @federicomena no expert here either :-) Either way, just checked my /bin/su and it does it too