As this is being passed on the command-line, it's going to be ephemerally stored in the
/proc/ filesystem. Anyone who has a local account can get a list of the running processes and their command-line arguments.
Which gives you a string. An example:
Which translates to:
/usr/bin/Xorg:0 -background none -logverbose 7 -auth /var/run/gdm/auth-for-gdm-yrx0zQ/database -nolistentcp vt7
cmdline pseudofile is world-readable, though it is only present when the process is actually running. These are visible in
top after pressing the
Some programs do manipulate that string so it isn't representative of what's actually running, though I don't know if php is one that allows such things.