An example of this is:

cat pass.txt | docker login -u jarjarbinks --password-stdin=true

Can another unprivileged process snoop on the data being transferred through the anonymous FIFO?

CodePudding user response：

does the process belong to the same user running this?

1. YES: well, just as you can attach a debugger to your own processes, another process run by your user (assuming you have the SYS_PTRACE capability, but you usually do) can just snoop on the system calls needed to read the stdin file descriptor.
2. NO: "standard" unix user separation applies and the other user can't interfere with your processes, their memory or file descriptors.