https://issues.apache.org/bugzilla/show_bug.cgi?id=53283

--- Comment #6 from Marvin Addison <marvin.addi...@gmail.com> ---
Actually, it was leveraging the system property replacement feature in the docs
you cited that led to this enhancement request.  We were setting system
properties in setenv.sh, but then discovered that had the very undesirable
consequence of leaking sensitive data to anyone on the system via ps output. 
While I could have engineered a valve or something to set system properties
more discretely, storing credentials in a global, long-term facility seemed
less desirable than a more targeted solution.

The patch here is about 20 lines and adds reasonable value.  I hope you'll
consider it.  I'm happy to respond to feedback on the patch if that will
increase the likelihood of acceptance.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to