c4: Disallow default DB password
Details
| Detail name | Value |
|---|---|
| Changelog Number | 23249 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | C4 4.29.0, Exasol 2025.2.0 |
| Resolution Date | 2025-11-18 |
Background
The database, called “Exasol”, created by default when performing an installation using c4 was allowed to use a default DB password if the user didn’t set it (via CCC_PLAY_DB_PASSWORD). This was a security risk allowing third parties to access the database if the default password was used.
Improvement
If the password is set to the default password, c4 now generates a random password and prints it to stderr at runtime.
Changed behavior
Using the default DB password is no longer possible. The DB will use a randomly generated password if the default password is set in the c4 config via CCC_PLAY_DB_PASSWORD.
