From mboxrd@z Thu Jan  1 00:00:00 1970
From: Ricardo Wurmus <rekado@elephly.net>
Subject: Re: Customize PAM configuration
Date: Sat, 10 Aug 2019 18:14:39 +0200
Message-ID: <87tvapuhe8.fsf@elephly.net>
References: <CAH6o9V-GNPMvxR5tU1M9aW=90t_VWkR8oS966awd1NXGF5dhcg@mail.gmail.com>
 <87o90xkrl8.fsf@ngyro.com>
 <CAH6o9V8m7axxqOe1hParW3V1xuhBP9AZpWT6ZgG8LrHDkfSV0g@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain
Return-path: <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:470:142:3::10]:49904)
 by lists.gnu.org with esmtp (Exim 4.86_2)
 (envelope-from <rekado@elephly.net>) id 1hwU14-0004wQ-8V
 for help-guix@gnu.org; Sat, 10 Aug 2019 12:14:51 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rekado@elephly.net>) id 1hwU13-0007FS-AS
 for help-guix@gnu.org; Sat, 10 Aug 2019 12:14:50 -0400
Received: from sender4-of-o53.zoho.com ([136.143.188.53]:21375)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <rekado@elephly.net>) id 1hwU12-0007CS-UC
 for help-guix@gnu.org; Sat, 10 Aug 2019 12:14:49 -0400
In-reply-to: <CAH6o9V8m7axxqOe1hParW3V1xuhBP9AZpWT6ZgG8LrHDkfSV0g@mail.gmail.com>
List-Id: <help-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-guix>,
 <mailto:help-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/help-guix>
List-Post: <mailto:help-guix@gnu.org>
List-Help: <mailto:help-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-guix>,
 <mailto:help-guix-request@gnu.org?subject=subscribe>
Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org
Sender: "Help-Guix" <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
To: Jone <yeger9@gmail.com>
Cc: help-guix@gnu.org


Jone <yeger9@gmail.com> writes:

> The password is entered once at login and exported
> to environment variable. As a result, password is available during the user
> session (for some automation with bash scripts).

Please know that environment variables are readable in /proc and in the
output of process managers.  An environment variable is not a good place
for a secret.

--
Ricardo