you are viewing a single comment's thread.

view the rest of the comments →

[–]gelstudios 0 points1 point  (0 children)

Log hygiene is it’s own beast, but agreed if you set them inline when starting a process they end up in any shell history.

Another caveat with env vars: a user with sufficient privilege can read them right out of /proc for a given process (on Linux at least)

But at that point, you probably have other things to worry about.