From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens |
Date: | 2001-11-28 20:13:55 |
Message-ID: | 200111282013.fASKDtY02414@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > The idea of allowing the password to be stored in a file with 600
> > permissions seems quite standard. CVS does this.
>
> Seems it would be nice if psql could accept a switch along the lines of
> --password-is-in-file filename
> and go off to read the password from the named file (which we hope is
> secured correctly).
We can check security of the file if we wish.
> Or take it a little further: what about defining a PGPASSWORDFILE
> environment variable that libpq would consult, before or instead of
> PGPASSWORD? That would give us the same feature for free across all
> libpq-using apps, not only psql. Exposing a file name in the
> environment is not a security risk, I hope.
Yes, seems like a good idea. Seems we may need both. Either we allow
multiple host/password combinations in the file or we need a psql flag,
but then again, a psql flag doesn't cover the other interfaces. We
could require they use one password file per host.
Added to TODO:
* Add PGPASSWORDFILE password file capability to libpq and psql flag
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
From | Date | Subject | |
---|---|---|---|
Next Message | Doug McNaught | 2001-11-28 20:23:57 | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens |
Previous Message | Bruce Momjian | 2001-11-28 20:00:07 | Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens |