On: Don’t use environment variables for configuration

[zokier]

In typical Linux setups, cmdline is world-readable, but environ is not. So you never should put secrets in cmdline, but they are ok to be in environ. And that is pretty much the only difference between the two.

[icedchai → zokier]

The environment is inherited by child processes. I think that is a very important difference.

[zokier → icedchai]

Of the relevant Linux syscalls neither fork or clone touch argv or environ at all, on the other hand execve requires passing both argv and envp explicitly