The main problem here is that command "./bin/storage dump" exposes password on system process list in clear text. It happens due to way the storage tool calls mysqldump command. In my opinion this is universally applicable to every Linux distribution Phabricator can run on.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 1 2020
Sep 1 2020
• IgoSha added a comment to T11433: MySQL "-p<password>" flag produces a warning in recent versions of MySQL.
Nov 14 2016
Nov 14 2016