Tom Lane wrote:
> The question at hand is whether we want to support an obvious security
> hole. The argument that "some people will not care" applies with at
> least as much force to psql or pg_dump, which at least have the grace
> to not hang around and advertise their command-line parameters forever.
> I think that using -P for pg_autovacuum is just plain stupid, even on a
> nominally secure single-user box.
Assuming that command-line parameters are actually globally visible on
your platform, which isn't necessarily the case.
Anyway, I basically agree that the legitimate use-case for this feature
is pretty small, and it is probably worth removing. However, I don't
think it is urgent (there are plenty of other ways to shoot yourself in
the foot), and shouldn't be backpatched -- people may be using this
In response to
pgsql-patches by date
|Next:||From: Neil Conway||Date: 2005-05-25 02:50:09|
|Subject: Re: fix a bogus line in dynahash.c|
|Previous:||From: Tom Lane||Date: 2005-05-25 02:44:13|
|Subject: Re: [PATCH] pg_autovacuum commandline password hiding. |