[SERVER-1129] mongodb shell should obscure password from ps Created: 17/May/10  Updated: 12/Jul/16  Resolved: 24/May/10

Status: Closed
Project: Core Server
Component/s: Shell
Affects Version/s: 1.4.0
Fix Version/s: 1.5.2

Type: Bug Priority: Major - P3
Reporter: Adam Fields Assignee: Mathias Stearn
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

linux


Issue Links:
Related
Participants:

 Description   

When using the -p option, the password is visible in the command line using ps.

In contrast, mysql obscures the password so you get a line like this in ps:

mysqluser 31077 31054 0 May14 pts/0 00:00:00 mysql -u root -px xxxxxxx



 Comments   
Comment by Mathias Stearn [ 24/May/10 ]

Done, but there is still a brief window of time after the program start but before the obscuring code is run while the password is visible in ps. If this is an issue, I'd suggest using -p "" and let mongo prompt for your password. Then it will never end up in ps.

Comment by auto [ 24/May/10 ]

Author:

{'login': 'RedBeard0531', 'name': 'Mathias Stearn', 'email': 'redbeard0531@gmail.com'}

Message: Hide password from ps output SERVER-1129
http://github.com/mongodb/mongo/commit/12a3059132cf008f0a090ba52246e9fff603a472

Generated at Thu Feb 08 02:56:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.