securely passing a password to subprocess.Popen via environment

问题

I would like to securely ask a password to a user and then pass it to subprocess.Popen to run a command that requires it.

I have seen this question and that one, but I wonder if I can securely pass the password via the subprocess environment like that:

import subprocess, os
user_password = input("what is you password?")
my_env = os.environ.copy()
my_env["userpass"] = user_password
my_command = "python --version"
subprocess.Popen(my_command, env=my_env)

Will the password be flushed once the python script is closed ? I have look at the subprocess documentation but it's not explained.

When I add this line print(os.environ['userpass']) at the end of my code to print the OS environment, I can retrieve the user password. Do it means that the password can be access by the other running processes ?

Edit: I can't pipe the password as the command I use doesn't read its password from standard input

来源：https://stackoverflow.com/questions/53232728/securely-passing-a-password-to-subprocess-popen-via-environment