[PDB-1303] puppetdb with postgres backend shows up password in process list to all users Created: 2015/03/19  Updated: 2015/03/19

Status: Open
Project: PuppetDB
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Minor
Reporter: Andreas Papst Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

puppetdb 2.2.2-1puppetlabs1
Debian GNU/Linux 7.8 (wheezy)


Template:

 Description   

According to your configuration document
https://docs.puppetlabs.com/puppetdb/2.2/postgres_ssl.html
I setup /etc/default/puppetdb with password to connect to postgresDB

  1. Modify this if you'd like to change the memory allocation, enable JMX, etc
    JAVA_ARGS="-Xmx192m -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/puppetdb/puppetdb-oom.hprof -Djavax.net.ssl.trustStore=/etc/puppetdb/ssl/truststore.jks -Djavax.net.ssl.trustStorePassword=<PASSWORD>"

Starting puppetdb and entering the command `ps -ef` the password is visible than to all users, what is imho very ugly.

Please provide a different approach to hand over trustStore password to java.


Generated at Wed Jun 26 23:24:53 PDT 2019 using JIRA 7.7.1#77002-sha1:e75ca93d5574d9409c0630b81c894d9065296414.