Bug 2278985 - Not using GUI for Boot Process to enter LUKS passphrase for encrypted /home partition leaves password visible on screen in plain text
Summary: Not using GUI for Boot Process to enter LUKS passphrase for encrypted /home p...
Keywords:
Status: CLOSED DUPLICATE of bug 2271337
Alias: None
Product: Fedora
Classification: Fedora
Component: plymouth
Version: 40
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Ray Strode [halfline]
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-05-03 20:21 UTC by LinuxUsr
Modified: 2024-05-04 09:39 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-05-04 09:39:17 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description LinuxUsr 2024-05-03 20:21:08 UTC
Upgraded from F39->F40 via dnf upgrade mechanism.

During first boot after upgrade, I hit Esc to see the service startups to monitor for any issues.

My /home partition is encrypted by LUKS.  

I get the normal prompt that looks like:

Enter passphrase for /home on ####: <enter password here>

When I do that, instead of nothing (or *s), I see my password in plain text.

After hitting <enter> I see an echo'd out statement:
Enter passphrase for /home on ####: ***** (number of *s equal to my password length)

This is 100% reproducible if you have an encrypted disk here. 

Boot process, after selecting kernel to boot into F40, hit escape to watch non-GUI boot process. When asked for passphrase for encrypted partition, enter it and hit <enter>.  You'll see your passphrase in plain text, then a repeat of the prompt with *'s immediately afterwards.

Note: This did not occur on F39.

Reproducible: Always

Steps to Reproduce:
1. Have an encrypted partition setup
2. Reboot system
3. Select kernel at GRUB and press enter
4. Hit <Esc> to watch services start up instead of the nice GUI
5. Enter passphrase when prompted
Actual Results:  
You see your passphrase in plain text

Expected Results:  
You should see nothing or *s

Comment 1 Milan Broz 2024-05-04 05:56:24 UTC
Crypstetup is not the process that displays password prompt. My guess it is duplicate of bug #2271337 but not sure, reassigning to plymouth for now.

Comment 2 Hans de Goede 2024-05-04 09:39:17 UTC
Right this is a duplicate of 2271337, marking it as such.

*** This bug has been marked as a duplicate of bug 2271337 ***


Note You need to log in before you can comment on or make changes to this bug.