innobackupex logs plaintext password

[Alexey Kopytov]

When a password for MySQL connection is specified with the --password option, innobackupex prints it in plaintext in the log.

$ ./innobackupex --password=secret /tmp
Version string '' contains invalid data; ignoring: '' at ./innobackupex line 1765.

InnoDB Backup Utility v1.5.1-xtrabackup; Copyright 2003, 2009 Innobase Oy.
All Rights Reserved.

This software is published under
the GNU GENERAL PUBLIC LICENSE Version 2, June 1991.

110305 23:09:40 innobackupex: Starting mysql with options: --password='secret' --unbuffered --
110305 23:09:40 innobackupex: Connected to database with mysql child process (pid=31889)

[Baron Schwartz (baron-xaprb)]

Patch here: https://gist.github.com/868772

[Alexey Kopytov (akopytov)]

Bug #886069 was marked as a duplicate of this one.

[Alexey Kopytov (akopytov)]

Targeting to 1.6 series as well, since the bug was fixed in the 1.7 tree when that tree was intended to be the next _minor_ release. Since the final stable 1.7 release is still months away, we should consider a backport for 1.6.4.

[Niyati (123niyati)]

The plain text password is still been visible with CentOS/GNU Linux percona-xtrabackup 2.2.9 version with ps -ef command too.

[Shahriyar Rzayev (rzayev-sehriyar)]

Percona now uses JIRA for bug reports so this bug report is migrated to: https://jira.percona.com/browse/PXB-560