database password is shown in ps!!!!
Nobody has claimed this yet.
- Dominant language
- Dockerfile
- Stars
- 1.2k
- Forks
- 1.7k
- PR merge metrics
- No merged PRs in 30d
Description
Wtf!!!
root 2406755 2253348 0 13:10 pts/2 00:00:00 docker run -v /dev/log:/dev/log -u root -it --entrypoint /bin/bash --network host odoo:14
root 2425070 2406781 18 14:30 pts/0 00:00:00 /usr/bin/python3 /usr/bin/odoo --db_host db2.local --db_port 5432 --db_user odooappuser --db_password Zxxxxxxxxxya
root 2425088 2241712 0 14:30 pts/1 00:00:00 grep --color=auto odoo
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the shown Docker/Odoo command and checking how the database password is passed to the running process. Confirm the process listing no longer exposes the password, while preserving the database connection behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, python
- Domain
- databases, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100