Re: about "pg_dump " without pompt password - Mailing list pgsql-general

From David Garamond
Subject Re: about "pg_dump " without pompt password
Date
Msg-id 415EA6C1.5010609@zara.6.isreserved.com
Whole thread Raw
In response to Re: about "pg_dump " without pompt password  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tom Lane wrote:
>>Is it possible that we setup the password in the pg_dump command line
>
> You might as well put it on a billboard --- anything in the command line
> can be seen by anyone who runs "ps".
>
> If you don't want to supply it manually, put it in ~/.pgpass.

At least in Linux, mysql replaces the password in the command line
argument with "xxxxxxxx" so you can't see them via "ps" nor via peeking
into /proc/<PID>/cmdline.

There is a short period where the password is visible though.

Are there any other risks? Or is the reason for not doing this is
because not all OS'es supports replacing the command line information?

--
dave

pgsql-general by date:

Previous
From: Tom Lane
Date:
Subject: Re: about "pg_dump " without pompt password
Next
From: Gaetano Mendola
Date:
Subject: Re: ODBC for PostgreSQL 7.4