http://www.perlmonks.org?node_id=1159392


in reply to Re: exec, echo and pipe
in thread exec, echo and pipe

I would simply pass it via the environment

Both command line and environment can be read by other users on the system (using tools like ps, pstree, top), so both are not the best place to pass a password around. Passing the password through a pipe prevents that.

Alexander

--
Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)

Replies are listed 'Best First'.
Re^3: exec, echo and pipe
by morgon (Priest) on Apr 03, 2016 at 01:44 UTC
    Can you read the environment via ps, pstree or top?

    If so how?

    The only way I know (on Linux) is via /proc.

      Can you read the environment via ps, pstree or top?

      If so how?

      The only way I know (on Linux) is via /proc.

      ps has an "e" flag:

      /home/alex>env - PASSWORD=SECRET sleep 100 & [1] 30765 /home/alex>ps e PID TTY STAT TIME COMMAND 1749 pts/1 Ss 0:00 -bash USER=alex LOGNAME=alex HOME=/home/ale +x PATH=/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin M +AIL=/var/mail/alex 5580 pts/1 R+ 0:00 ps e CPLUS_INCLUDE_PATH=/usr/lib64/qt/inclu +de MANPATH=/usr/local/man:/usr/man:/usr/lib64/java/man:/opt/bincimap/ +man:/opt/swish-e/ma 30765 pts/1 S 0:00 sleep 100 PASSWORD=SECRET /home/alex>ps --version procps version 3.2.8 /home/alex>

      pstree and top can show command line arguments (using pstree -a), but they can't list the environment.

      Alexander

      --
      Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)