RE: mysql command line execution

[Edwin Cruz]

Mhm....

daemon2# uname -r -s
FreeBSD 5.2.1-RELEASE

daemon2# mysql --version
mysql  Ver 14.10 Distrib 5.0.6-beta, for unknown-freebsd5.2.1 (i386) using
EditLine wrapper 

daemon2# mysql -utr8 -ptr8 &

daemon2# ps -ef | grep mysql
  230  p0- IL     0:00.01  /bin/sh /usr/local/bin/mysqld_safe
--datadir=/var/lib/mysql
41064  p0  IL+    0:00.02  mysql -h157.87.200.57 -utr8 -ptr8

daemon2# mysql -utr8 -p &
Enter password:

daemon2# ps -ef | grep mysql
  230  p0- IL     0:00.01  /bin/sh /usr/local/bin/mysqld_safe
--datadir=/var/lib/mysql
41079  p0  SL+    0:00.02  mysql -h157.87.200.57 -utr8 -p


I can see my pwd if I do a "ps"

-----Original Message-----
From: Eugene Kosov [mailto:kea@stripped] 
Sent: Monday, August 01, 2005 7:03 AM
To: Ehrwin Mina
Cc: Nuno Pereira; mysql@stripped
Subject: Re: mysql command line execution

Ehrwin Mina wrote:
>> That isn't true. If you make a ps, you will see something like "mysql 
>> -p x xxxxxxxx ................".
>>
>> As I said before, you can use something like:
>> "mysql -uUser --password=`cat password_file` db"
>>
> 
> FYI,
> 
> Nuno is correct you cannot see the password in the 'ps' and my scripts 
> is just an example you can modify it for more security like putting it 
> a config file or much better if you can use perl. Don't forget the 
> user privileges only.
> 

Hm... May be it's OS (or MySQL version) depending stuff but following shows
me you're wrong.

1)
 > uname -r -s
FreeBSD 5.3-RELEASE

 > mysql --version
mysql  Ver 14.7 Distrib 4.1.6-gamma-nightly-20041014, for unknown-freebsd5.3
(i386)

 > mysql -ptest -utest &
 > ps | grep mysql
63841  p5  T      0:00,02 mysql -ptest -utest

2)
 > uname -r -s
SunOS 5.9

 > mysql --version
mysql  Ver 14.11 Distrib 5.0.9-beta, for pc-solaris2.9 (i386) using readline
5.0

 > mysql -ptest -utest &
 > ps -ef | grep mysql | grep test
     kea 22646 22644  0 15:56:02 pts/4    0:00 mysql -piss_pwd -uiss_usr

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/mysql?unsub=1