[Konsole-devel] [Bug 144440] root's password revealed when I enter a command from sudo with & at the end on terminal

[Robert Knight]

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
         
http://bugs.kde.org/show_bug.cgi?id=144440         
robertknight gmail com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From robertknight gmail com  2007-04-20 14:27 -------
Appending the '&' character to the end of a command causes it to run in the background.

In this case sudo prints the "Password:" part of the prompt and goes into the background, and so when you type - you are in fact interacting directly with bash and not actually entering a password into sudo.

For example, run "sudo xyz&" and when the "Password:" text is displayed, type in "ls" and press return - and you can see the output from running the ls command.  To get back to the password prompt, type "fg" in the shell.