[Koha-bugs] [Bug 20929] New: koha-dump should not pass a --password argument to mysqldump

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20929

            Bug ID: 20929
           Summary: koha-dump should not pass a --password argument to
                    mysqldump
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P5 - low
         Component: Packaging
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: solaris.smoke at gmail.com
        QA Contact: testopia at bugs.koha-community.org
                CC: mirko at abunchofthings.net

Created attachment 76017
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=76017&action=edit
Use env variable instead of --password argument for mysqldump

koha-dump currently passes a password as a CLI argument to mysqldump, which
results in the following warning:

mysqldump: [Warning] Using a password on the command line interface can be
insecure.

Depending on how a server is configured, this results in emails being sent to
the administrator every time the cron job runs.

It's trivial to change this to pass an environment variable instead, so as not
to trigger the warning.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.