Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Avoid storing password in variable to prevent process listing exposure

Browse Source 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c18311e4-609d-4edf-a2a1-a018baede373

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-07 18:27:32 +00:00
committed by GitHub
parent 5a27b79b51
commit 069f6c3ec7
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/core/factory-seal.nix
View File

@@ -121,8 +121,7 @@ EOF
# If the free password has been changed from the factory default, no warning needed
if [ -f /var/lib/secrets/free-password ]; then
CURRENT=$(cat /var/lib/secrets/free-password)
[ "$CURRENT" != "free" ] && exit 0
[ "$(cat /var/lib/secrets/free-password)" != "free" ] && exit 0
fi
# No flags at all + secrets exist = legacy (pre-seal era) machine