dcrctl exposes the RPC password in the process list

decred / dcrd

Decred daemon in Go (golang).

https://decred.org

ISC License

736 stars 291 forks source link

dcrctl exposes the RPC password in the process list #47

Closed jyap808 closed 8 years ago

jyap808 commented 8 years ago

Running this command dcrctl -u user -P password --terminal

The plain text password is displayed.

jcvernaleo commented 8 years ago

You can specify the username and password in the config file instead which will not show anything in the process list. jcv@koopa ~ $ cat ~/.dcrctl/dcrctl.conf [Application Options]

rpcuser=USER rpcpass=PASSWORD