When piping data to a command in bash, can other processes snoop on the data? - PeakU

0

250

Views

When piping data to a command in bash, can other processes snoop on the data?

An example of this is:

cat pass.txt | docker login -u jarjarbinks --password-stdin=true

Can another unprivileged process snoop on the data being transferred through the anonymous FIFO?

over 4 years ago · Santiago Trujillo

1 answers

Answer question

0

does the process belong to the same user running this?

YES: well, just as you can attach a debugger to your own processes, another process run by your user (assuming you have the SYS_PTRACE capability, but you usually do) can just snoop on the system calls needed to read the stdin file descriptor.
NO: "standard" unix user separation applies and the other user can't interfere with your processes, their memory or file descriptors.

over 4 years ago · Santiago Trujillo Report

Answer question

Find remote jobs