Skip to Content.
Sympa Menu

freetds - Re: [freetds] Securely specifying passwords for freebcp and such

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Frediano Ziglio <freddy77 AT gmail.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Securely specifying passwords for freebcp and such
  • Date: Sat, 11 Aug 2018 07:58:04 +0100

2018-08-02 20:45 GMT+01:00 Benjamin Moody <benjamin.moody AT gmail.com>:
> There's a useful feature which is not mentioned in the FreeTDS man
> pages: for several of the command-line tools, if you specify the
> option '-P -', the password will be read from standard input. This is
> the case for tsql, freebcp, defncopy, and bsqldb.
>
> The feature isn't all that useful for tsql, but for the other tools,
> it may be a helpful option for batch processing. Indeed, at least for
> freebcp, it appears to be the only secure way to supply a password
> (on a system where program command lines are visible to everyone via
> /proc/.)
>
> (For example, in a shell script:
>
> freebcp [...] -U "$user" -P "$pass"
>
> typically allows other users to see the password using 'ps', but
>
> freebcp [...] -U "$user" -P - <<EOF
> $pass
> EOF
>
> doesn't.)
>
> So, this feature should probably be documented.

Any suggestion on the text to write?
Is not hard to change the files but even suggestions are welcome.

Frediano




Archive powered by MHonArc 2.6.24.

Top of Page