Re: username/password is displayed in Linux process list

--On Monday, January 29, 2007 11:22 AM -0800 Dang Nguyen
<dang@docusign.com> wrote:

> I use CruiseControl (continuous build system) to run hourly and nightly
> builds. Part of its task is to delete the local working copy and
> checkout the latest from SVN. I've noticed that when the checkout
> occurs, the username and password that I pass on the command line is
> displayed in plain text if I look at the process list (i.e., ps -ef).
> This is obviously a real security problem. Has this been reported
> before? The username and password should be masked, as I've seen other
> applications do.

Is it possible to pass the credentials in environment variables? I think
this is one of the solutions Samba uses to prevent exposing them through
process status utilities.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Jan 29 20:27:44 2007