Re: BUG #18817: Security Bug Report: Plaintext Password Exposure in Logs

From: "Daniel Westermann (DWE)" <daniel(dot)westermann(at)dbi-services(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Matthias Apitz <guru(at)unixarea(dot)de>
Cc: Indrajeeth Deshmukh <bkindrajeeth(at)gmail(dot)com>, David Rowley <dgrowleyml(at)gmail(dot)com>, "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: Re: BUG #18817: Security Bug Report: Plaintext Password Exposure in Logs
Date: 2025-02-19 06:39:56
Message-ID: GV0P278MB041978A9E389AEE82AF9B6B4D2C52@GV0P278MB0419.CHEP278.PROD.OUTLOOK.COM
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

_______________________________________
From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Sent: Wednesday, February 19, 2025 07:30
To: Matthias Apitz <guru(at)unixarea(dot)de>
Cc: Indrajeeth Deshmukh <bkindrajeeth(at)gmail(dot)com>; David Rowley <dgrowleyml(at)gmail(dot)com>; pgsql-bugs(at)lists(dot)postgresql(dot)org <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: Re: BUG #18817: Security Bug Report: Plaintext Password Exposure in Logs
 
Matthias Apitz <guru(at)unixarea(dot)de> writes:
> What do I have to configure in the PostgreSQL server to get this
> reproduced? I tried:

export PGDATA=/var/tmp/xx; rm -rf $PGDATA; export PGPORT=8888; initdb; echo "logging_collector=on" >> $PGDATA/postgresql.auto.conf; echo "log_statement=ddl" >> $PGDATA/postgresql.auto.conf; pg_ctl start; psql <<< "create user u with password 'u'"; cat $PGDATA/log/*; pg_ctl stop

Regards
Daniel

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Sergey Belyashov 2025-02-19 06:55:08 Re: BUG #18815: Logical replication worker Segmentation fault
Previous Message Tom Lane 2025-02-19 06:30:18 Re: BUG #18817: Security Bug Report: Plaintext Password Exposure in Logs