[SERVER-1129] mongodb shell should obscure password from ps Created: 17/May/10 Updated: 12/Jul/16 Resolved: 24/May/10 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Shell |
| Affects Version/s: | 1.4.0 |
| Fix Version/s: | 1.5.2 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Adam Fields | Assignee: | Mathias Stearn |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Environment: |
linux |
||
| Issue Links: |
|
||||
| Participants: | |||||
| Description |
|
When using the -p option, the password is visible in the command line using ps. In contrast, mysql obscures the password so you get a line like this in ps: mysqluser 31077 31054 0 May14 pts/0 00:00:00 mysql -u root -px xxxxxxx |
| Comments |
| Comment by Mathias Stearn [ 24/May/10 ] |
|
Done, but there is still a brief window of time after the program start but before the obscuring code is run while the password is visible in ps. If this is an issue, I'd suggest using -p "" and let mongo prompt for your password. Then it will never end up in ps. |
| Comment by auto [ 24/May/10 ] |
|
Author: {'login': 'RedBeard0531', 'name': 'Mathias Stearn', 'email': 'redbeard0531@gmail.com'}Message: Hide password from ps output |