hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Daniel Dai (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-12282) beeline - update command printing in verbose mode
Date Wed, 28 Oct 2015 01:14:27 GMT

     [ https://issues.apache.org/jira/browse/HIVE-12282?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Daniel Dai updated HIVE-12282:
------------------------------
    Attachment: HIVE-12282.1.patch

> beeline - update command printing in verbose mode
> -------------------------------------------------
>
>                 Key: HIVE-12282
>                 URL: https://issues.apache.org/jira/browse/HIVE-12282
>             Project: Hive
>          Issue Type: Bug
>          Components: Beeline
>            Reporter: Daniel Dai
>            Assignee: Daniel Dai
>             Fix For: 2.0.0
>
>         Attachments: HIVE-12282.1.patch
>
>
> In verbose mode, beeline prints the password used in commandline to STDERR. 
> This is not a good security practice. 
> Issue is in BeeLine.java code -
> {code}
>     if (url != null) {
>       String com = "!connect "
>           + url + " "
>           + (user == null || user.length() == 0 ? "''" : user) + " "
>           + (pass == null || pass.length() == 0 ? "''" : pass) + " "
>           + (driver == null ? "" : driver);
>       debug("issuing: " + com);
>       dispatch(com);
>     }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message