Reputation
6,392
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 8 33
Newest
 Revival
Impact
~188k people reached

12h
answered How to open compressed file in less mode
13h
reviewed Close Shell script to get common elements from two files
13h
reviewed Close How to install/run some non-free programs isolated from rest?
13h
reviewed Close In centos6.5 i have problem bringing up bridge interface br0
1d
reviewed Close What is wrong with the code?
1d
reviewed Approve How to catch my bluetooth service events
1d
reviewed Reject How to determine if the kernel sources are installed?
1d
reviewed Approve How kernel will get control from u-boot in linux and who will un comnpress the image
1d
reviewed Reject Convert IP Address to Coordinates using database
Jun
26
revised Hiding Password in Shell Scripts
edited tags
Jun
26
reviewed No Action Needed Looking at logs from bottom upwards
Jun
26
reviewed Approve How to prevent Apper from removing older kernels when updating (installonly_limit)
Jun
26
comment Hiding Password in Shell Scripts
Thanks for the compliment! If this had been ServerFault I would have voted to close it for not being according to business practices... but here I'm more willing to take the time to educate people being new to things.
Jun
26
comment Hiding Password in Shell Scripts
I've written my answer now. What I was trying to get at from you was partly my fifth point - once the credentials are stored in memory they are not fully secure from an attacker with access to the server. Also that your terse answer was not very helpful, even though not incorrect. I'm thinking of pointing at it the next time someone complains that we at ServerFault are not as nice as the people at Unix/Linux :-)
Jun
26
answered Hiding Password in Shell Scripts
Jun
26
comment Hiding Password in Shell Scripts
It would have been really interesting to get to read an actual answer that the poster could have used to implement a more secure system from you. Do you think you might write one at some point?
Jun
26
comment Hiding Password in Shell Scripts
You are claiming to know my answer before I've written it.
Jun
26
comment Hiding Password in Shell Scripts
Your predictive powers are lacking.
Jun
26
comment Hiding Password in Shell Scripts
Firstly, At no point did I recommend using passwords in scripts. Secondly, for a script that is run interactively, obviously entering the password or the key is trivial - the problem is when the scripts are not run interactively. I'd be very interested in your take on this in an answer.
Jun
26
comment Hiding Password in Shell Scripts
And then you have the problem of protecting the key - which, again, if you have access to the script, then you can get at the credentials, whether they be a password or a file. The problem isn't new, but that doesn't mean that it's easily solved for your average shell script writer.