From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Antonio Fiol Bonnín <fiol(at)w3ping(dot)com> |
Cc: | Zeugswetter Andreas SB SD <ZeugswetterA(at)spardat(dot)at>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Doug McNaught <doug(at)wireboard(dot)com>, Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens |
Date: | 2001-11-28 18:48:37 |
Message-ID: | 200111281848.fASImbi25813@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
> Zeugswetter Andreas SB SD wrote:
>
> > > Doug McNaught <doug(at)wireboard(dot)com> writes:
> > > > But this way the password ends up in the environment, which on many
> > > > systems is visible to other processes/users (via /proc or the 'ps'
> > > > command).
> > >
> > > Your *environment* is visible to other users? Geez, what a broken
> > > system ...
> >
> > Try "ps axewww" ? Doesn't work on your platform ?
> > Works on AIX, Linux?, ...
>
> Linux Debian Unstable (updated 1 week ago).
>
> For a non-root user, only her processes' environment appears.
> (and /proc/*/environ permissions are 400, the user being the process owner)
>
> For root, all processes' environment is shown.
On BSD/OS, it doesn't matter what user you are. You can see the
environment of all processes.
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2001-11-28 18:50:29 | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens |
Previous Message | Tom Lane | 2001-11-28 18:48:27 | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up |