Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Doug McNaught <doug(at)wireboard(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Date: 2001-11-28 20:35:47
Message-ID: 200111282035.fASKZlb04404@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
>
> > OK, new text is:
> >
> > <envar>PGPASSWORD</envar>
> > sets the password used if the backend demands password
> > authentication. This is not recommended because the password can
> > be read by others using <command>ps -e</command>.
>
> Just a nit--the 'e' option is for Berkeley-style ps (/usr/ucb/ps on
> Solaris). SysV ps doesn't have an equivalent from what I can see,
> (though I may have missed it) and '-e' does something totally
> different.

OK, I reread what you said and I see now I am not going to get away with
being brief. Text is now:

<envar>PGPASSWORD</envar>
sets the password used if the backend demands password
authentication. This is not recommended because the password can
be read by others using a <command>ps</command> environment flag
on some platforms.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Doug McNaught 2001-11-28 20:44:29 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Previous Message Bruce Momjian 2001-11-28 20:28:17 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens