[cups.bugs] [LOW] STR #2779: cupsaddsmb leaves password in cleartext on harddisk when no drivers are installed

[Michael Sweet]

[STR Closed w/Resolution]

First, the temporary file is created so only the owner can read the file.

Second, the method is the recommended one by the Samba folks and was a
recommended change by an OpenBSD person (we used to pass the username and
password on the command-line...)

So, we aren't going to change this behavior - it is working as designed.

That said, I did find one instance (when no drivers are installed) which
did not remove the temporary file. A fix is attached and will be part of
the next CUPS 1.3.x release.

Link: http://www.cups.org/str.php?L2779
Version: 1.2.7
Fix Version: 1.4-current (r7411)
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: str2779.patch
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20080331/83296574/attachment.ksh>