Re: redacting password in SQL statement in server log - Mailing list pgsql-hackers

From Zhihong Yu
Subject Re: redacting password in SQL statement in server log
Date
Msg-id CALNJ-vQ570o3rMegwiEw80d0cB26ReCAs==zcFb+AuFHczH3QQ@mail.gmail.com
Whole thread Raw
In response to Re: redacting password in SQL statement in server log  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers


On Sat, Jul 23, 2022 at 5:27 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
Zhihong Yu <zyu@yugabyte.com> writes:
> Currently, in situation such as duplicate role creation, the server log
> would show something such as the following:

> 2022-07-22 13:48:18.251 UTC [330] STATEMENT:  CREATE ROLE test WITH LOGIN
> PASSWORD 'foobar';

> The password itself should be redacted before logging the statement.

This has been proposed multiple times, and rejected multiple times,
primarily because it offers only false security: you'll never cover
all the cases.  (The proposed patch manages to create a bunch of
false positives to go along with its false negatives, too.)

The only safe answer is to be sure to keep the server log contents
secure.  Please see prior discussions in the archives.

                        regards, tom lane

Pardon my laziness.

I will pay more attention.

pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: redacting password in SQL statement in server log
Next
From: Zhang Mingli
Date:
Subject: Re: optimize lookups in snapshot [sub]xip arrays