Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens

From: Doug McNaught <doug(at)wireboard(dot)com>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Date: 2001-11-28 20:23:57
Message-ID: m3hereod9e.fsf@belphigor.mcnaught.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:

> OK, new text is:
>
> <envar>PGPASSWORD</envar>
> sets the password used if the backend demands password
> authentication. This is not recommended because the password can
> be read by others using <command>ps -e</command>.

Just a nit--the 'e' option is for Berkeley-style ps (/usr/ucb/ps on
Solaris). SysV ps doesn't have an equivalent from what I can see,
(though I may have missed it) and '-e' does something totally
different.

> I am unsure if Linux has this problem but it seems most other Unix's do.

Modern versions (of Linux) don't seem to--you can see the env for your
processes but not for others'.

-Doug
--
Let us cross over the river, and rest under the shade of the trees.
--T. J. Jackson, 1863

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2001-11-28 20:28:17 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Previous Message Bruce Momjian 2001-11-28 20:13:55 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens