From: Dmitry V. Levin <ldv@strace.io>
Date: Wed, 5 Jul 2023 18:00:00 +0000 (+0000)
Subject: pwquality: do not log password suggestions
X-Git-Tag: v254-rc1~7^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0351d560a25cb7caf94c1f9c1af1f5e9b6b6a01a;p=thirdparty%2Fsystemd.git

pwquality: do not log password suggestions

As logging password suggestions might leak sensitive information,
print it instead.

Suggested-by: Yu Watanabe <watanabe.yu+github@gmail.com>
---

diff --git a/src/shared/pwquality-util.c b/src/shared/pwquality-util.c
index d25104c38f6..34d3e353305 100644
--- a/src/shared/pwquality-util.c
+++ b/src/shared/pwquality-util.c
@@ -128,7 +128,7 @@ int suggest_passwords(void) {
         if (!joined)
                 return log_oom();
 
-        log_info("Password suggestions: %s", joined);
+        printf("Password suggestions: %s\n", joined);
         return 1;
 }