From: Matthew Tice <mjtice@gmail.com>
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51\))
Subject: Re: What are best practices wrt passwords?
Date: Wed, 16 Oct 2024 13:07:37 -0600
References: <87o73kgzkd.fsf@mbork.pl>
 <CAFCRh-8dM4bLGTKcv1v5wC9guhY_b5G=6w-ivHM4UJGwMUyWaA@mail.gmail.com>
 <87frowggzq.fsf@mbork.pl> <Zw_qvUHTC98XcGa6@momjian.us>
 <186766.1729097245@sss.pgh.pa.us>
 <B3A1837B-FA96-42A4-A6D4-949E93EB267C@thebuild.com>
To: pgsql-general@postgresql.org
In-Reply-To: <B3A1837B-FA96-42A4-A6D4-949E93EB267C@thebuild.com>
Message-Id: <2BB7312C-B811-4B16-B5BD-313582980112@gmail.com>
Archived-At: <https://www.postgresql.org/message-id/2BB7312C-B811-4B16-B5BD-313582980112%40gmail.com>
Precedence: bulk


> On Oct 16, 2024, at 10:50=E2=80=AFAM, Christophe Pettus =
<xof@thebuild.com> wrote:
>=20
>=20
>=20
>> On Oct 16, 2024, at 09:47, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> I believe it depends on your platform --- some BSDen are pretty
>> permissive about this, if memory serves.  On a Linux box it seems
>> to work for processes owned by yourself even if you're not superuser.
>=20
> I just tried it on an (admittedly kind of old) Ubuntu system and MacOS =
14, and it looks like shows everything owned by everyone, even from a =
non-sudoer user.
>=20
Interesting, that=E2=80=99s not my experience.  Only root can see the =
env variables of another user.

Terminal 1

$ cat /etc/os-release
NAME=3D"Ubuntu"
VERSION=3D"20.04.6 LTS (Focal Fossa)"
ID=3Dubuntu
ID_LIKE=3Ddebian
PRETTY_NAME=3D"Ubuntu 20.04.6 LTS"
VERSION_ID=3D"20.04"
HOME_URL=3D"https://www.ubuntu.com/"
SUPPORT_URL=3D"https://help.ubuntu.com/"
BUG_REPORT_URL=3D"https://bugs.launchpad.net/ubuntu/"
=
PRIVACY_POLICY_URL=3D"https://www.ubuntu.com/legal/terms-and-policies/priv=
acy-policy"
VERSION_CODENAME=3Dfocal
UBUNTU_CODENAME=3Dfocal

$ whoami
testusr

$ export FOOBAR=3Dtrue

$ bash

$ env | grep FOOBAR
FOOBAR=3Dtrue

Terminal 2
$  whoami
mtice

$  ps e -U testusr | grep -c FOOBAR
0

$  sudo ps e -U testusr | grep -c FOOBAR
1