Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t18m2-00Etol-5c for pgsql-general@arkaria.postgresql.org; Wed, 16 Oct 2024 18:29:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t18m0-007vAb-Bu for pgsql-general@arkaria.postgresql.org; Wed, 16 Oct 2024 18:29:28 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t18m0-007v8t-0j for pgsql-general@lists.postgresql.org; Wed, 16 Oct 2024 18:29:28 +0000 Received: from cloud.gatewaynet.com ([185.90.37.94]) by makus.postgresql.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t18lx-001E6j-Ek for pgsql-general@lists.postgresql.org; Wed, 16 Oct 2024 18:29:27 +0000 Message-ID: Date: Wed, 16 Oct 2024 21:29:20 +0300 MIME-Version: 1.0 Subject: Re: What are best practices wrt passwords? To: pgsql-general@lists.postgresql.org References: <87o73kgzkd.fsf@mbork.pl> <87frowggzq.fsf@mbork.pl> <186766.1729097245@sss.pgh.pa.us> Content-Language: en-US From: Achilleas Mantzios In-Reply-To: <186766.1729097245@sss.pgh.pa.us> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Στις 16/10/24 19:47, ο/η Tom Lane έγραψε: > Bruce Momjian writes: >> On Wed, Oct 16, 2024 at 06:16:57PM +0200, mbork@mbork.pl wrote: >>> `ps auxe` shows all processes with their environments, no? >> I think that only shows for super-user. > I believe it depends on your platform --- some BSDen are pretty > permissive about this, if memory serves. On a Linux box it seems As of FreeBSD smadevnu 14.1-RELEASE-p5 , only the user and root can view the env, such as PGPASSWORD of a user. Other users can't. > to work for processes owned by yourself even if you're not superuser. > > regards, tom lane > >