Bug 476312

Summary:	"Weak Password" dialog displays actual password
Product:	[Fedora] Fedora	Reporter:	Luke Macken <lmacken>
Component:	anaconda	Assignee:	Anaconda Maintenance Team <anaconda-maint-list>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	rawhide	CC:	anaconda-maint-list, nphilipp, petersen, pfrields, ricky
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-12-15 15:57:56 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Luke Macken 2008-12-13 00:03:49 UTC

Description of problem:

The "Weak Password" dialog now displays the password itself.  Since the person reading it was the one who typed in the password, showing it to them is unnecessary and a security risk.  Also, this dialog seems to always pop up, regardless of the password strength.

http://lmacken.fedorapeople.org/tmp/anaconda-password.png

Version-Release number of selected component (if applicable):
rawhide, 20081212

Comment 1 Luke Macken 2008-12-13 00:05:14 UTC

Ricky threw together an untested patch that could potentially resolve this issue:

http://ricky.fedorapeople.org/anaconda-cracklib.patch

Comment 2 Nils Philippsen 2008-12-15 13:45:16 UTC

Fixing component.

Comment 3 Chris Lumens 2008-12-15 15:06:19 UTC

*** Bug 476484 has been marked as a duplicate of this bug. ***

Comment 4 Chris Lumens 2008-12-15 15:57:56 UTC

This bug will be fixed in the next build of anaconda.  Thanks for the patch.