Re: [HACKERS] TODO list updated

On Thu, 13 Jan 2000, Peter Eisentraut wrote:

> On Wed, 12 Jan 2000, The Hermit Hacker wrote:
> 
> > On Wed, 12 Jan 2000, Bruce Momjian wrote:
> > 
> > > > If we do a 'CREATE USER <user> WITH PASSWORD <pass>', its no more secure
> > > > then using a command line switch for password ... 
> > > 
> > > Why is that?  ps shows command args, righ?
> > 
> > Point.  You won me over :)
> 
> But it doesn't show the complete command line, only SELECT or UPDATE, etc.
> I'm not sure if it also shows create, I haven't been able to simulate
> that.

No, that isn't the problem...the problem is that initdb, if you run it
with command line arguments, will show up in a ps listing with those
command line arguments...

if you type 'initdb --pgpasswd=passwd' it will show up in pas as exactly
that ...

its not the SELECT/UPDATE/etc that we are worried about...

Marc G. Fournier                   ICQ#7615664               IRC Nick: Scrappy
Systems Administrator @ hub.org 
primary: scrappy@hub.org           secondary: scrappy@{freebsd|postgresql}.org