[SOLVED] Mint 19.1 -- Terminals show asterisks on password. How to disable this feature?

[kayaksan]

Greetings.

I have noticed that terminals in Linux Mint 19.1 Tessa (XFCE4-panel 12.2, 64-bits, kernel 4.15.0-43 generic) display asterisks when the user needs to type their root password. I've tried this is UXTerm, Gnome-Terminal, Terminator and XFCE4 Terminal. I believe this is universal. I've looked on the advanced tab on the documentation page of the terminal and found no mention of that (at least explicitly). I've searched on the terminal settings a way to disable this feature -- so far, nothing related to it. I've also tried the visudo way of showing asterisks by adding the pwfeedback line, but in my case, this line doesn't exist, so I can't delete it to try a fix. It's become a standard feature.

I'd like to know how to disable this feature and maintain the plain invisible feature when typing password in terminals.

Thanks in advance.

[MrEen]

Hi kayaksan.

From Clem here:

Yes, you can remove /etc/sudoers.d/0pwfeedback.

[kayaksan]

Hello MrEren

Thank you for your answer, it has helped me tailor my question specifically and it made me look at the comments and other Linux Mint blog posts again.

I've found a way to disable it with one command:

Code: Select all

sudo mv /etc/sudoers.d/0pwfeedback /etc/sudoers.d/0pwfeedback.disabled 

Thanks to the user NIkoKrauser here on this link.


Solved!

[MrEen]

An even better way there, as it's reversible. Nice find.

[Moem]

Solved!

That's cool! I'll mark the topic as SOLVED for you, this time.

[gm10]

An even better way there, as it's reversible. Nice find.

The only good way is to override it, that's why I prefixed it with the 0 so it gets read early:

Code: Select all

echo 'Defaults !pwfeedback'|sudo tee /etc/sudoers.d/9_no_pwfeedback

The other two solutions won't survive the next update to the mintsystem package, that's why they're no good in the long term.

As a side-note, I'm surprised people have issues with this feature, considering graphical authentication works the same way. I just normalized password entry between GUI and terminal so we don't have to explain to newbies anymore that their keyboard isn't broken when on a command line.

[MrEen]

Understood and agreed. If someone can see and count asterisks's's's , they can also probably hear and count keyclicks.

[gm10]

Understood and agreed. If someone can see and count asterisks's's's , they can also probably hear and count keyclicks.

I'd say if someone is close enough to count the * they can probably see the keys you press as well.

[thx-1138]

...............................

...care to earn a few 'points' over at stackexchange?

[gm10]

...care to earn a few 'points' over at stackexchange?

It might surprise you but I don't even have an account at SE or related sites. My Linux forum-life is limited to the Mint forums. If you're out for rep at SE feel free to answer in my stead.

[thx-1138]

Hahaha! I dont' have an account myself either there, thereby i'll pass the opportunity to...
'make a name' for myself - even if under the direct permission from the author himself
I do browse though stackexchange, askubuntu & reddit on a semi-daily basis as a way of spending killing time,
and picking up the odd piece of info or workaround here & there...
Noticed the above yesterday & found it somewhat amusing - in the sense,
of just how much 'pointless' such 'point' systems can be, at least online...

[Pjotr]

As a side-note, I'm surprised people have issues with this feature, considering graphical authentication works the same way. I just normalized password entry between GUI and terminal so we don't have to explain to newbies anymore that their keyboard isn't broken when on a command line.

You achieved that? Thanks!

Indeed, there was no valid reason to maintain that difference between graphical authentication and terminal authentication. It just makes life easier for newbies, without diminishing their security.

I did have to modify quite some amount of lines in the how-to's on my website, though.

[gm10]

You achieved that? Thanks!

Indeed, there was no valid reason to maintain that difference between graphical authentication and terminal authentication. It just makes life easier for newbies, without diminishing their security.

Cheers for the feedback. I think you're actually the first to say out loud that hey liked the change. And it's not just easier for newbies, I find it convenient myself.

I did have to modify quite some amount of lines in the how-to's on my website, though.

Hah, I take that as a good thing, because if you felt it necessary to add that much explanation that further confirms my reasoning for changing it.

[Pjotr]

Yep, it's a good change.... It makes me wonder why Ubuntu never thought of that. After all, Ubuntu's very reason for existence is to make Debian easier.

And don't mind the criticism.... Nobody in his right mind can defend the logic of graphical authentication *with* feedback, and terminal authentication *without* feedback. Feedback is only a very small decrease of security, but heightens the user-friendliness noticeably.

I suppose the criticasters are just creatures of habit.
https://www.youtube.com/watch?v=ut3jqRlElOM

[gm10]

And don't mind the criticism....

Oh don't worry, I don't, it's obvious you'll never please everyone. And while that specific feature is pretty binary, generally criticism of the constructive kind can be very helpful to further improve things, so I invite it.