Skip site navigation (1) Skip section navigation (2)

Re: [PATCH] pg_autovacuum commandline password hiding.

From: "Matthew T(dot) O'Connor" <matthew(at)zeut(dot)net>
To: Dave Page <dpage(at)vale-housing(dot)co(dot)uk>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Ian FREISLICH <if(at)hetzner(dot)co(dot)za>,pgsql-patches(at)postgresql(dot)org
Subject: Re: [PATCH] pg_autovacuum commandline password hiding.
Date: 2005-05-24 16:15:26
Message-ID: 4293531E.4040203@zeut.net (view raw or flat)
Thread:
Lists: pgsql-patches
Dave Page wrote:

>>-----Original Message-----
>>From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us] 
>>    
>>
>>I would argue actually that this switch is a horrible idea and we
>>must take it out entirely.  The method Ian proposes for hiding the
>>password after reading it is certainly not portable in the slightest,
>>and even if we could make it work on all platforms (which we can't)
>>I don't think it would be good enough, because there would still be
>>a window where the superuser password was exposed to view before
>>we could wipe it out.
>>    
>>
>
>Agreed. The attached patch should do the trick.
>

 From a cursory glance at the patch it looks OK to me.  I don't have 
time to test it right now.

Sorry about this, I should have removed the username / password switches 
a while ago.

In response to

pgsql-patches by date

Next:From: Andrew DunstanDate: 2005-05-24 16:29:43
Subject: Re: plperl strict mode
Previous:From: Alvaro HerreraDate: 2005-05-24 16:15:15
Subject: Re: plperl strict mode

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group