Re: [Linux-decnet-user] dnprogs password security

[Patrick C. <pa...@ty...>]

...And here's a patch for dntask...enjoy!

Index: dntask/dntask.c
===================================================================
RCS file: /cvsroot/linux-decnet/dnprogs/dntask/dntask.c,v
retrieving revision 1.3
diff -u -r1.3 dntask.c
--- dntask/dntask.c	2001/01/21 13:36:58	1.3
+++ dntask/dntask.c	2001/03/14 19:04:35
@@ -437,6 +437,21 @@
         accessdata.acc_acc[0] = '\0';
 
 
+
+    /* If the password is "-" and fd 0 is a tty then 
+       prompt for a password */
+    if (accessdata.acc_pass[0] == '-' && accessdata.acc_pass[1] == '\0' && isatty(0))
+    {	
+	char *password = getpass("Password: ");
+	if (password == NULL || strlen(password) > (unsigned int)MAX_PASSWORD)
+	{
+	    lasterror = "Password input cancelled";
+	    return FALSE;
+	}
+	strcpy(accessdata.acc_pass, password);
+    }
+
+    
     /* Complete the accessdata structure */
     accessdata.acc_userl = strlen(accessdata.acc_user);
     accessdata.acc_passl = strlen(accessdata.acc_pass);

-- 

patrick