Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up

From: Antonio Fiol Bonnín <fiol(at)w3ping(dot)com>
To: Zeugswetter Andreas SB SD <ZeugswetterA(at)spardat(dot)at>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Doug McNaught <doug(at)wireboard(dot)com>, Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up
Date: 2001-11-28 17:17:04
Message-ID: 3C051C10.3803D22C@w3ping.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Zeugswetter Andreas SB SD wrote:

> > Doug McNaught <doug(at)wireboard(dot)com> writes:
> > > But this way the password ends up in the environment, which on many
> > > systems is visible to other processes/users (via /proc or the 'ps'
> > > command).
> >
> > Your *environment* is visible to other users? Geez, what a broken
> > system ...
>
> Try "ps axewww" ? Doesn't work on your platform ?
> Works on AIX, Linux?, ...

Linux Debian Unstable (updated 1 week ago).

For a non-root user, only her processes' environment appears.
(and /proc/*/environ permissions are 400, the user being the process owner)

For root, all processes' environment is shown.

Antonio

>
>
> Andreas
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/users-lounge/docs/faq.html

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message bpalmer 2001-11-28 17:21:21 Re: Sequence docs
Previous Message Tom Lane 2001-11-28 17:13:29 Re: [HACKERS] upper and lower doesn't work with german