Re: What are best practices wrt passwords? - Mailing list pgsql-general

From Bruce Momjian
Subject Re: What are best practices wrt passwords?
Date
Msg-id ZxAyD07sVAE7gu1j@momjian.us
Whole thread Raw
In response to What are best practices wrt passwords?  (mbork@mbork.pl)
List pgsql-general
On Wed, Oct 16, 2024 at 11:27:15PM +0200, Peter J. Holzer wrote:
> On 2024-10-16 09:50:41 -0700, Christophe Pettus wrote:
> > > On Oct 16, 2024, at 09:47, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> > > I believe it depends on your platform --- some BSDen are pretty
> > > permissive about this, if memory serves.  On a Linux box it seems
> > > to work for processes owned by yourself even if you're not superuser.
> > 
> > I just tried it on an (admittedly kind of old) Ubuntu system and MacOS
> > 14, and it looks like shows everything owned by everyone, even from a
> > non-sudoer user.
> 
> On Linux, unprivileged users can only see the environment of their own
> processes since a *very* long time ago. Possibly even before Ubuntu even
> existed. So I'm somewhat sceptical about that. Some other Unixes were
> more permissive. I don't know what camp MacOS falls into.

Yes, I thought this was fixed long ago.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  When a patient asks the doctor, "Am I going to die?", he means 
  "Am I going to die soon?"



pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: Backup
Next
From: Koen De Groote
Date:
Subject: Logical replication disabled, recovery not possible because of 1 large transaction with schema changes?