Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Antonio Fiol Bonnín <fiol(at)w3ping(dot)com>
Cc: Zeugswetter Andreas SB SD <ZeugswetterA(at)spardat(dot)at>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Doug McNaught <doug(at)wireboard(dot)com>, Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Date: 2001-11-28 18:48:37
Message-ID: 200111281848.fASImbi25813@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> Zeugswetter Andreas SB SD wrote:
>
> > > Doug McNaught <doug(at)wireboard(dot)com> writes:
> > > > But this way the password ends up in the environment, which on many
> > > > systems is visible to other processes/users (via /proc or the 'ps'
> > > > command).
> > >
> > > Your *environment* is visible to other users? Geez, what a broken
> > > system ...
> >
> > Try "ps axewww" ? Doesn't work on your platform ?
> > Works on AIX, Linux?, ...
>
> Linux Debian Unstable (updated 1 week ago).
>
> For a non-root user, only her processes' environment appears.
> (and /proc/*/environ permissions are 400, the user being the process owner)
>
> For root, all processes' environment is shown.

On BSD/OS, it doesn't matter what user you are. You can see the
environment of all processes.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2001-11-28 18:50:29 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Previous Message Tom Lane 2001-11-28 18:48:27 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up