3 ms·
Linux does not hide process environments, you can cat /proc/[pid]/environ to read them. It is not a good way to pass secrets.
by justincormack 10y ago
Linux does not hide process environments, you can cat /proc/[pid]/environ to read them. It is not a good way to pass secrets.
- heroprotagonist 10y agoTrue, but people do it anyway and a large number of applications are preconfigured to use them. But to the point, the same tool that hides the secret and encrypts the variable in 'docker inspect' will also show it as encrypted in /proc/[pid]/environ as well.
- justincormack 10y agoThat would be a kernel patch then. Good luck getting that upstream.
- jlgaddis 10y agoOn mobile so no URLs, etc, but cf. "hidepid" mount option for /proc.