From: Karel Zak <kzak@redhat.com>
Date: Wed, 19 Jun 2019 11:05:46 +0000 (+0200)
Subject: script: add note about --log-in and passwords
X-Git-Tag: v2.35-rc1~163
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7d5617c409a00adb76f5656c6e106e171a7ec0fb;p=thirdparty%2Futil-linux.git

script: add note about --log-in and passwords

Signed-off-by: Karel Zak <kzak@redhat.com>
---

diff --git a/term-utils/script.1 b/term-utils/script.1
index 75ad24f032..9c558b1294 100644
--- a/term-utils/script.1
+++ b/term-utils/script.1
@@ -57,6 +57,10 @@ saves the dialogue in this
 .IR file .
 If no filename is given, the dialogue is saved in the file
 .BR typescript .
+.PP
+Note that log input by \fB\-\-log\-in\fR or \fB\-\-log\-io\fR may be security
+sensitive operation as the log file contains all terminal session input (it
+means also passwords) independently on the terminal echo flag setting.
 .SH OPTIONS
 Below, the \fIsize\fR argument may be followed by the multiplicative
 suffixes KiB (=1024), MiB (=1024*1024), and so on for GiB, TiB, PiB, EiB, ZiB and YiB