So I'm trying to write a build script for Gentoo Liniux for moquette, and it was all going well until I got to writing the startup scripts to install with it: The password has to be provided on the command line.
Now, that also means that anyone who has user access, no matter what level of privileges they have, can read this password from the output of ps or from /proc -- acceptable in some contexts, but not in others, and especially dangerous if moquette is running as a privileged user.
Could it possibly read a configuration file of some sort? I would do it myself, but unfortunately, I know no more Go than it takes to go get <url>.
So I'm trying to write a build script for Gentoo Liniux for moquette, and it was all going well until I got to writing the startup scripts to install with it: The password has to be provided on the command line.
Now, that also means that anyone who has user access, no matter what level of privileges they have, can read this password from the output of
psor from/proc-- acceptable in some contexts, but not in others, and especially dangerous if moquette is running as a privileged user.Could it possibly read a configuration file of some sort? I would do it myself, but unfortunately, I know no more Go than it takes to
go get <url>.