freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Re: [freetds] 0.91RC1

From: Constantin Vasilyev <vasilyev AT ncbi.nlm.nih.gov>
To: "konrad AT payplus.com" <konrad AT payplus.com>
Cc: FreeTDS Development Group <freetds AT lists.ibiblio.org>
Subject: Re: [freetds] 0.91RC1
Date: Sun, 10 Apr 2011 08:56:27 -0400

Hi Konrad,

Unfortunatelly, it is not really safe to keep database password in
environment variable.
On Linux, for example, one could inspect other's process environment
by looking into /proc/<PID>/environ

Constantin

On Sun, Apr 10, 2011 at 07:36:04AM -0400, Konrad J Hambrick wrote:
>
> I also found it useful (and more secure ps-wise) to
> avoid setting the HostName / UserName / PassWord on
> the commandline.
>
> freebcp.c already looks for a environment varb: FREEBCP
> so I added code to src/apps/freebcp.c to use FREEBCPHOST,
> FREEBCPUSER and FREEBCPPASS from the user's environment
> instead of from the commandline.
>

[freetds] 0.91RC1, James K. Lowden, 04/09/2011
- Re: [freetds] 0.91RC1, Ken Collins, 04/09/2011
  - Re: [freetds] 0.91RC1, Frediano Ziglio, 04/11/2011
    - Re: [freetds] 0.91RC1, Ken Collins, 04/11/2011
- Re: [freetds] 0.91RC1, Konrad J Hambrick, 04/10/2011
  - Re: [freetds] 0.91RC1, Constantin Vasilyev, 04/10/2011
    - Re: [freetds] 0.91RC1, Konrad J Hambrick, 04/10/2011
      - Re: [freetds] 0.91RC1, Constantin Vasilyev, 04/10/2011
        
        Re: [freetds] 0.91RC1, Konrad J Hambrick, 04/10/2011