Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warning: Using a password on the command line interface can be insecure. #3

Open
linedotpaul opened this issue Jul 12, 2019 · 4 comments
Assignees
Labels

Comments

@linedotpaul
Copy link
Contributor

If you removed the code at the end of the cron script to suppress e-mail warnings to the admin you get sent an email with an error/warning:

'Warning: Using a password on the command line interface can be insecure.'

To combat this I have created a fork where the database username and password are instead stored in a file (.sqlcnf) which is accessed in the mysqldump command via '--defaults-extra-file'.

I am concerned that this is not necessarily the best solution because it requires the person installing to remember to restrict the permissions on the .sqlcnf file stated in the README in order to prevent it being a security issue in itself.

@lysender lysender added the bug label Jul 12, 2019
@lysender lysender self-assigned this Jul 12, 2019
@lysender
Copy link
Owner

I'll take a look at this. I think there might be an option to silent those warnings.

@lysender
Copy link
Owner

Or maybe not silent the warnings, but actually pass the password securely...

@lysender
Copy link
Owner

@linedotpaul let me know if the new update is good enough.

@linedotpaul
Copy link
Contributor Author

@lysender looks good to me :). One thing to add - I think it's worth adding a warning to the README that warns people to set the permissions to 6-0-0 or equivalent for the my.cnf file if they decide to use it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants