Hot answers tagged

4

It's possible for a user on the system (or a monitoring program that captures ps output) to see the password as a parameter to the groupadd process -- if the user or monitor "happens" to run ps while the groupadd process is running. The risk of that happening is small (the groupadd process will likely finish running fairly quickly), but non-zero. See an ...


2

The way I handle the same requirement is similar as what Mike wrote about Michael: ~/bin/sshmyvps #!/bin/bash if ! ssh-add -l|grep -q vpsaccess then ssh-add -t 2h ~/ssh-keys/vpsaccess.key fi ssh myuser@myserver.mydomain.net The main difference being that I don't look for just any loaded keys but only for a specific one and then leaving it valid for ...


1

Don't reinvent your own password store. Use an existing one. The Linux world has mostly converged on GNOME Keyring. Seahorse provides a convenient GUI for exploring and modifying the keyring and setting a master password. The keyring can be queried from the command line with the secret-tool utility. secret-tool store --label='Foobar webservice' service ...



Only top voted, non community-wiki answers of a minimum length are eligible