AW: AW: The --password and clumsy users issue

2014-07-06 Thread Markus Schaber
Hi, Julian, > Von: Julian Foad [mailto:julianf...@btopenworld.com] > I was about to commit Ben's suggestion of changing the --password help text > to > > "specify a password ARG (this usually is not secure)" > > as a first step that would be useful on its own regardless whether we do > somethi

Re: [PATCH]: Add --password-file and --password-envvar

2014-07-06 Thread Martin Furter
Resending my reply to the list too... On 07/06/14 20:39, Martin Furter wrote: On 07/06/14 20:09, Bert Huijben wrote: I'm not sure if the envvar option is really any safer than the argument option, if the command line is really read from the environment block on these platforms. As such I don't

RE: [PATCH]: Add --password-file and --password-envvar

2014-07-06 Thread Bert Huijben
I'm not sure if the envvar option is really any safer than the argument option, if the command line is really read from the environment block on these platforms. As such I don't think having a command option for that really helps. For the file solution it might be more useful to use both usernam

[PATCH]: Add --password-file and --password-envvar

2014-07-06 Thread Martin Furter
Attached is a log message and a patch which adds the new options '--password-file' and '--password-envvar'. It also adds Julians warning to the '--password' help text. I haven't found out yet how the test suite checks the '--password' option. So I tested it just by hand :) Also I added a che