when one issues

    some_command -p password

the password will be shown by ps and probably in other places, like
/proc.


1. What is the full list of places where the password will be shown?

2. How to hide it?
2.1 I googled a bit and saw 2 main methods:
2.1.1 By using a here document:

             some_command <<EOF
                         -p password
                         EOF

      Will this method hide the password completely? That is, will it be
      hidden from all the places that were mentioned in section 1 above?
2.1.2 By making the command line long enough so that the password will
      be effectively hidden from ps. I didn't like that method.
2.1.3 Anything else?
2.2 When the source for command is under control, what is the best way
    to hide the password while still being able to read it in the 
    command line?
2.2.1 A method which slightly deviates from the requirement is to make
      the program able to read parameters from a file. Beside the need
          to handle this file, what are the drawbacks?
2.2.2 What about 
          printf "-p password" | some_command - 
          ? 
2.2.3 Anything else?

-- 
"If you have an apple and I have  an apple and we  exchange apples then
you and I will still each have  one apple. But  if you have an idea and I
have an idea and we exchange these ideas, then each of us will have two
ideas." -- George Bernard Shaw     (sent by  shaulk @ actcom . net . il)

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to