[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: username/password is displayed in Linux process list

From: Kenneth Porter <shiva_at_sewingwitch.com>
Date: 2007-01-29 20:27:15 CET

--On Monday, January 29, 2007 11:22 AM -0800 Dang Nguyen
<dang@docusign.com> wrote:

> I use CruiseControl (continuous build system) to run hourly and nightly
> builds. Part of its task is to delete the local working copy and
> checkout the latest from SVN. I've noticed that when the checkout
> occurs, the username and password that I pass on the command line is
> displayed in plain text if I look at the process list (i.e., ps -ef).
> This is obviously a real security problem. Has this been reported
> before? The username and password should be masked, as I've seen other
> applications do.

Is it possible to pass the credentials in environment variables? I think
this is one of the solutions Samba uses to prevent exposing them through
process status utilities.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Jan 29 20:27:44 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.