freetds AT lists.ibiblio.org
Subject: FreeTDS Development Group
List archive
Re: [freetds] Securely specifying passwords for freebcp and such
- From: Frediano Ziglio <freddy77 AT gmail.com>
- To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
- Subject: Re: [freetds] Securely specifying passwords for freebcp and such
- Date: Sat, 11 Aug 2018 07:58:04 +0100
2018-08-02 20:45 GMT+01:00 Benjamin Moody <benjamin.moody AT gmail.com>:
> There's a useful feature which is not mentioned in the FreeTDS man
> pages: for several of the command-line tools, if you specify the
> option '-P -', the password will be read from standard input. This is
> the case for tsql, freebcp, defncopy, and bsqldb.
>
> The feature isn't all that useful for tsql, but for the other tools,
> it may be a helpful option for batch processing. Indeed, at least for
> freebcp, it appears to be the only secure way to supply a password
> (on a system where program command lines are visible to everyone via
> /proc/.)
>
> (For example, in a shell script:
>
> freebcp [...] -U "$user" -P "$pass"
>
> typically allows other users to see the password using 'ps', but
>
> freebcp [...] -U "$user" -P - <<EOF
> $pass
> EOF
>
> doesn't.)
>
> So, this feature should probably be documented.
Any suggestion on the text to write?
Is not hard to change the files but even suggestions are welcome.
Frediano
-
[freetds] Securely specifying passwords for freebcp and such,
Benjamin Moody, 08/02/2018
- Re: [freetds] Securely specifying passwords for freebcp and such, Frediano Ziglio, 08/11/2018
Archive powered by MHonArc 2.6.24.