docs: faq: specify "using inline shell scripts"

(cherry picked from commit 3faafb1dee)
This commit is contained in:
Marian Beermann 2017-06-06 21:30:58 +02:00 committed by Thomas Waldmann
parent 93efd2dca4
commit 9aa3fe19d7
1 changed files with 1 additions and 0 deletions

View File

@ -132,6 +132,7 @@ key file based encryption with a blank passphrase. See
.. _password_env:
.. note:: Be careful how you set the environment; using the ``env``
command, a ``system()`` call or using inline shell scripts
(e.g. ``BORG_PASSPHRASE=hunter12 borg ...``)
might expose the credentials in the process list directly
and they will be readable to all users on a system. Using
``export`` in a shell script file should be safe, however, as