mirror/borg
1
0
Fork 0
mirror of https://github.com/borgbackup/borg.git synced 2025-03-15 00:21:56 +00:00
Code Issues Releases Wiki Activity

remove passphrase from subprocess environment, fixes #1105

Browse source
This commit is contained in:
Thomas Waldmann 2016-06-05 00:25:30 +02:00
parent 53937a2b60
commit ca35d9f255
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
borg/remote.py
View file

@ -153,6 +153,7 @@ class RemoteRepository:
# pyinstaller binary adds LD_LIBRARY_PATH=/tmp/_ME... but we do not want # pyinstaller binary adds LD_LIBRARY_PATH=/tmp/_ME... but we do not want
# that the system's ssh binary picks up (non-matching) libraries from there # that the system's ssh binary picks up (non-matching) libraries from there
env.pop('LD_LIBRARY_PATH', None) env.pop('LD_LIBRARY_PATH', None)
env.pop('BORG_PASSPHRASE', None) # security: do not give secrets to subprocess
self.p = Popen(borg_cmd, bufsize=0, stdin=PIPE, stdout=PIPE, stderr=PIPE, env=env) self.p = Popen(borg_cmd, bufsize=0, stdin=PIPE, stdout=PIPE, stderr=PIPE, env=env)
self.stdin_fd = self.p.stdin.fileno() self.stdin_fd = self.p.stdin.fileno()
self.stdout_fd = self.p.stdout.fileno() self.stdout_fd = self.p.stdout.fileno()