在python中清除sys.argv

Question

When user specify a password in MySQL cli, aka -pXXXXXX , the password parameter is replaced to -p****** in argv array.

So when someone check the process list with ps , they can't see the password.

How can I do the same in Python? This doesn't work obviously

for arg in sys.argv[1:]:
    arg = ""

Answer 1

sys.argv = [sys.argv[0]]

works and is more efficient and elegant than deleting all but the first element. I can't confirm this would overwrite or erase previous value of sys.argv in memory though.

Answer 2

You can make a wrapper that accepts a password and other arguments. It will then spawn a child, pass it the password in the way that's not visible in command line, eg. with multiprocessing , and kill itself. For killing processes while keeping their children alive look here .

Answer 3

我没有找到方法，所以我转向令牌的环境变量（并在获取后取消设置以防止泄漏到子进程）。