hibari / clus

Cluster is a simple tool for installing, configuring, and bootstrapping a cluster of nodes - primarily Hibari nodes.
Other
5 stars 4 forks source link

Erlang cookie is visible by ps command #1

Open norton opened 13 years ago

norton commented 13 years ago

Hibari's erlang cookie is stored in the vm.args configuration file. This file is given as an argument to erl as -arg_file. Unfortunately, this file is not read by the beam.smp process directly but passed as command line arguments that are visible by the ps command.

I'd prefer to use the ~/.erlang.cookie approach to provide a little bit more security over the current behavior. This issue is common to rebar and it's default templates (e.g. nodetool).

1 S hibari   27469     1  0  78   0 -  2631 -      19:09 ?        00:00:00 /usr/local/var/lib/hibari/hibari/erts-5.8.2/bin/run_erl -daemon /usr/local/var/lib/hibari/hibari/tmp/ /usr/local/var/lib/hibari/hibari/log exec /usr/local/var/lib/hibari/hibari/bin/hibari console
0 S hibari   27470 27469  0  85   0 - 52439 stext  19:09 pts/0    00:00:16 /usr/local/var/lib/hibari/hibari/erts-5.8.2/bin/beam.smp -K true -A 64 -- -root /usr/local/var/lib/hibari/hibari -progname hibari -- -home /usr/local/var/lib/hibari -- -boot /usr/local/var/lib/hibari/hibari/releases/0.1.0/hibari -embedded -config /usr/local/var/lib/hibari/hibari/etc/app.config -sname hibari@perf02 -setcookie j7FNiO1lFDxmIXxsPqphxEOVG -kernel net_ticktime 20 --env ERL_MAX_ETS_TABLES 10007 -- console