The RELEASE_COOKIE value in the /etc/myapp/env file can be seen by 'ps aux | grep setcookie', is it normal?

Questions / Help
1

Hi,

myapp was released by mix release and was packaged into a .deb to be installed as a daemon.

The RELEASE_COOKIE variable is in the /etc/myapp/env file, and we use EnvironmentFile=/etc/myapp/env in the myapp.service file.

Why can we still see the value of RELEASE_COOKIE by ps aux | grep setcookie ? And what should we do to hide the cookie value from non-sudo users?

Erlang: 27.3.4
Elixir: 1.18.3-otp-27

Please help.

1 Like