Secure Passwords in Memory
Alex
the_brain at mit.edu
Sat Sep 30 18:19:40 EDT 2000
> I don't think you're going to get the string zero'd out of memory
> without writing some C somewhere, but perhaps a better thing to do
> would be to write a setuid wrapper for the program that python is to
> call, or just run the python program as root. I can't think of any
> situations that those two solutions wouldn't cover, offhand.
Actually, there might be something you could do by storing the password
in a buffer object. I'm not sure.
Alex.
--
Speak softly but carry a big carrot.
More information about the Python-list
mailing list