Bug 2232317 - gnome-terminal echos sensitive commands
Summary: gnome-terminal echos sensitive commands
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-terminal
Version: 37
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Matthias Clasen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-08-16 09:44 UTC by zorrodino
Modified: 2023-08-16 09:48 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: ---
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description zorrodino 2023-08-16 09:44:39 UTC
Gnome terminal echos the command being executed in the tab/terminal title regardless of the settings.

This is a problem for me because occasionally I run scrips which require a password as an argument.
For example: az login -u .... -p #####
I start these commands with the HISTIGNORE value of course.

The problem is that this behaviour appears inescapable.
Changes to PROMPT_COMMAND and PS1 do not seem to achieve anything.
Changes in settings do not seem to achieve anything.

The problem persists when using bash --norc.

Reproducible: Always

Steps to Reproduce:
1. Open gnome-terminal
2. Run: yes "mypassword"
3. See yes mypassword in terminal title and tab title
Actual Results:  
See yes mypassword in terminal title and tab title

Expected Results:  
Ability to hide sensitive commands

Comment 1 zorrodino 2023-08-16 09:48:44 UTC
The reason I made this a medium bug is that one can work-around the problem. It is, however, very annoying and a security concern if somebody isn't well aware of this.

Setting the command to know what the terminal is running is not bad per-se, BUT there should be some better way to protect sensitive commands


Note You need to log in before you can comment on or make changes to this bug.