[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

username/password is displayed in Linux process list

From: Dang Nguyen <dang_at_docusign.com>
Date: 2007-01-29 20:22:25 CET

I use CruiseControl (continuous build system) to run hourly and nightly
builds. Part of its task is to delete the local working copy and
checkout the latest from SVN. I've noticed that when the checkout
occurs, the username and password that I pass on the command line is
displayed in plain text if I look at the process list (i.e., ps -ef).
This is obviously a real security problem. Has this been reported
before? The username and password should be masked, as I've seen other
applications do.
 
I am running svn 1.3.2 on a Redhat Linux 4 Enterprise Edition server.
Received on Mon Jan 29 20:22:52 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.