Re: [PATCH] pg_autovacuum commandline password hiding. - Mailing list pgsql-patches

From Neil Conway
Subject Re: [PATCH] pg_autovacuum commandline password hiding.
Date
Msg-id 4293EF6F.6000800@samurai.com
Whole thread Raw
In response to Re: [PATCH] pg_autovacuum commandline password hiding.  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: [PATCH] pg_autovacuum commandline password hiding.  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-patches
Tom Lane wrote:
> I don't offhand know of any Unix platforms where they cannot be found
> out

I don't know which platforms it is secure/insecure on, but I can
certainly imagine secure systems where ps(1) data in general is viewed
as sensitive and thus not made globally visible.

> My inclination is to remove this from HEAD (where it may be moot anyway
> by the time 8.1 freezes) and from 8.0.

I don't think there is sufficient justification for removing this
feature and breaking users of a stable release series. The documentation
states this feature is likely insecure, so presumably people who are
using it are aware of the consequences.

-Neil

pgsql-patches by date:

Previous
From: Tom Lane
Date:
Subject: Re: fix a bogus line in dynahash.c
Next
From: "Qingqing Zhou"
Date:
Subject: Re: fix a bogus line in dynahash.c