Re: [PATCH] pg_autovacuum commandline password hiding.

From: "Matthew T(dot) O'Connor" <matthew(at)zeut(dot)net>
To: Dave Page <dpage(at)vale-housing(dot)co(dot)uk>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Ian FREISLICH <if(at)hetzner(dot)co(dot)za>, pgsql-patches(at)postgresql(dot)org
Subject: Re: [PATCH] pg_autovacuum commandline password hiding.
Date: 2005-05-24 16:15:26
Message-ID: 4293531E.4040203@zeut.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-patches

Dave Page wrote:

>>-----Original Message-----
>>From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us]
>>
>>
>>I would argue actually that this switch is a horrible idea and we
>>must take it out entirely. The method Ian proposes for hiding the
>>password after reading it is certainly not portable in the slightest,
>>and even if we could make it work on all platforms (which we can't)
>>I don't think it would be good enough, because there would still be
>>a window where the superuser password was exposed to view before
>>we could wipe it out.
>>
>>
>
>Agreed. The attached patch should do the trick.
>

From a cursory glance at the patch it looks OK to me. I don't have
time to test it right now.

Sorry about this, I should have removed the username / password switches
a while ago.

In response to

Browse pgsql-patches by date

  From Date Subject
Next Message Andrew Dunstan 2005-05-24 16:29:43 Re: plperl strict mode
Previous Message Alvaro Herrera 2005-05-24 16:15:15 Re: plperl strict mode