Re: How to fork pg_dump or psql w/o leaking secrets? - Mailing list pgsql-general

From Tom Lane
Subject Re: How to fork pg_dump or psql w/o leaking secrets?
Date
Msg-id 1065798.1695408971@sss.pgh.pa.us
Whole thread Raw
In response to Re: How to fork pg_dump or psql w/o leaking secrets?  ("David G. Johnston" <david.g.johnston@gmail.com>)
Responses Re: How to fork pg_dump or psql w/o leaking secrets?
List pgsql-general
"David G. Johnston" <david.g.johnston@gmail.com> writes:
> Once you have the password you should utilize the PGPASSWORD environment
> variable to get it passed to psql.  It doesn’t matter in the least how you
> obtained that password in the first place.

Keep in mind that on many flavors of Unix, a process's environment
variables can readily be inspected by other processes.  You should
check your platform carefully before assuming that PGPASSWORD is
a safe way to pass down a secret.

            regards, tom lane



pgsql-general by date:

Previous
From: Nick Ivanov
Date:
Subject: Re: Start service
Next
From: Brad White
Date:
Subject: Re: Start service