Page MenuHomeVyOS Platform

Do not set encrypted user password when it is not changed
Closed, ResolvedPublicFEATURE REQUEST

Description

On every system boot the encrypted user password is written from the config into theoperating system. This information will leak into the generated bootchart when debugging the system startup time issue.

Only pass the encrypted string to the operating system when the password is really changed.

As the system boot timing option is for deleopers only and rather new this does not pose a security risk, to enable it read https://docs.vyos.io/en/latest/contributing/development.html#boot-timing.

Details

Version
-
Is it a breaking change?
Behavior change
Issue type
Feature (new functionality)

Event Timeline

c-po closed this task as Resolved.
c-po claimed this task.
c-po triaged this task as High priority.
c-po edited a custom field.
c-po changed Is it a breaking change? from Unspecified (possibly destroys the router) to Behavior change.
erkin removed a subscriber: Global Notifications.
dmbaturin set Issue type to Feature (new functionality).Nov 8 2024, 10:49 AM