Re: 0.91RC1
Constantin Vasilyev <[email protected]>
| Newsgroups | gmane.comp.db.tds.freetds |
|---|---|
| Message-ID | <[email protected]> |
Hi Konrad, Unfortunatelly, it is not really safe to keep database password in environment variable. On Linux, for example, one could inspect other's process environment by looking into /proc/<PID>/environ Constantin On Sun, Apr 10, 2011 at 07:36:04AM -0400, Konrad J Hambrick wrote: > > I also found it useful (and more secure ps-wise) to > avoid setting the HostName / UserName / PassWord on > the commandline. > > freebcp.c already looks for a environment varb: FREEBCP > so I added code to src/apps/freebcp.c to use FREEBCPHOST, > FREEBCPUSER and FREEBCPPASS from the user's environment > instead of from the commandline. >