[Exim] -d9 reveals postgres password

Top Page
Delete this message
Reply to this message
Author: Joachim Wieland
Date:  
To: exim-users
Subject: [Exim] -d9 reveals postgres password
Hi,

maybe this has already come up, but anyway...

I stumbled about this with exim 3.33:

joe@mcrock:~$ /usr/sbin/exim -d9 -bt adfadf 2>&1| grep password
PGSQL new connection: host=localhost port=0 database=maildb user=exim
password=exim


So, I am a normal user and I am able to see the password?

I am not able to read /etc/exim/exim.conf and I have used
"hide pgsql_servers"


Joachim

--
The eagle may soar, but the weasel never gets sucked into a jet engine.