"Allow sudo to prompt for a password even if it would be visisble",
NULL,
}, {
- "pwstars", T_FLAG,
- "Print a stars at the password prompt when there is user input",
+ "pwfeedback", T_FLAG,
+ "Provide visual feedback at the password prompt when there is user input",
NULL,
}, {
"fast_glob", T_FLAG,
#define I_SUDOERS_LOCALE 68
#define def_visiblepw (sudo_defs_table[69].sd_un.flag)
#define I_VISIBLEPW 69
-#define def_pwstars (sudo_defs_table[70].sd_un.flag)
-#define I_PWSTARS 70
+#define def_pwfeedback (sudo_defs_table[70].sd_un.flag)
+#define I_PWFEEDBACK 70
#define def_fast_glob (sudo_defs_table[71].sd_un.flag)
#define I_FAST_GLOB 71
visiblepw
T_FLAG
"Allow sudo to prompt for a password even if it would be visisble"
-pwstars
+pwfeedback
T_FLAG
- "Print a stars at the password prompt when there is user input"
+ "Provide visual feedback at the password prompt when there is user input"
fast_glob
T_FLAG
"Use faster globbing that is less accurate but does not access the filesystem"
effective group IDs, however, are still set to match the target
user. This flag is I<off> by default.
-=item pwstars
+=item pwfeedback
By default, B<sudo> reads the password like most other Unix programs,
by turning off echo until the user hits the return (or enter) key.
Some users become confused by this as it appears to them that B<sudo>
-has hung at this point. When I<pwstars> is set, B<sudo> will print
-a star for each character of the password the user enters. Note
-that this does have a security impact, as an onlooker will be able
-to determine the length of the password being entered.
+has hung at this point. When I<pwfeedback> is set, B<sudo> will
+provide visual feedback when the user presses a key. Note that
+this does have a security impact as an onlooker may be able to
+determine the length of the password being entered.
This flag is I<off> by default.
=item requiretty
(void) sigaction(SIGTTIN, &sa, &savettin);
(void) sigaction(SIGTTOU, &sa, &savettou);
- if (def_pwstars)
+ if (def_pwfeedback)
neednl = term_raw(input);
else
neednl = term_noecho(input);
if (timeout > 0)
alarm(timeout);
- pass = getln(input, buf, sizeof(buf), def_pwstars);
+ pass = getln(input, buf, sizeof(buf), def_pwfeedback);
alarm(0);
save_errno = errno;