From: | "Matthew T(dot) O'Connor" <matthew(at)zeut(dot)net> |
---|---|
To: | Dave Page <dpage(at)vale-housing(dot)co(dot)uk> |
Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Ian FREISLICH <if(at)hetzner(dot)co(dot)za>, pgsql-patches(at)postgresql(dot)org |
Subject: | Re: [PATCH] pg_autovacuum commandline password hiding. |
Date: | 2005-05-24 16:15:26 |
Message-ID: | 4293531E.4040203@zeut.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-patches |
Dave Page wrote:
>>-----Original Message-----
>>From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us]
>>
>>
>>I would argue actually that this switch is a horrible idea and we
>>must take it out entirely. The method Ian proposes for hiding the
>>password after reading it is certainly not portable in the slightest,
>>and even if we could make it work on all platforms (which we can't)
>>I don't think it would be good enough, because there would still be
>>a window where the superuser password was exposed to view before
>>we could wipe it out.
>>
>>
>
>Agreed. The attached patch should do the trick.
>
From a cursory glance at the patch it looks OK to me. I don't have
time to test it right now.
Sorry about this, I should have removed the username / password switches
a while ago.
From | Date | Subject | |
---|---|---|---|
Next Message | Andrew Dunstan | 2005-05-24 16:29:43 | Re: plperl strict mode |
Previous Message | Alvaro Herrera | 2005-05-24 16:15:15 | Re: plperl strict mode |