Reputation
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 9 34
Newest
 Yearling
Impact
~202k people reached

Jun
29
reviewed Approve How kernel will get control from u-boot in linux and who will un comnpress the image
Jun
29
reviewed Reject Convert IP Address to Coordinates using database
Jun
26
revised Hiding Password in Shell Scripts
edited tags
Jun
26
reviewed No Action Needed Looking at logs from bottom upwards
Jun
26
reviewed Approve How to prevent Apper from removing older kernels when updating (installonly_limit)
Jun
26
comment Hiding Password in Shell Scripts
Thanks for the compliment! If this had been ServerFault I would have voted to close it for not being according to business practices... but here I'm more willing to take the time to educate people being new to things.
Jun
26
comment Hiding Password in Shell Scripts
I've written my answer now. What I was trying to get at from you was partly my fifth point - once the credentials are stored in memory they are not fully secure from an attacker with access to the server. Also that your terse answer was not very helpful, even though not incorrect. I'm thinking of pointing at it the next time someone complains that we at ServerFault are not as nice as the people at Unix/Linux :-)
Jun
26
answered Hiding Password in Shell Scripts
Jun
26
comment Hiding Password in Shell Scripts
It would have been really interesting to get to read an actual answer that the poster could have used to implement a more secure system from you. Do you think you might write one at some point?
Jun
26
comment Hiding Password in Shell Scripts
You are claiming to know my answer before I've written it.
Jun
26
comment Hiding Password in Shell Scripts
Your predictive powers are lacking.
Jun
26
comment Hiding Password in Shell Scripts
Firstly, At no point did I recommend using passwords in scripts. Secondly, for a script that is run interactively, obviously entering the password or the key is trivial - the problem is when the scripts are not run interactively. I'd be very interested in your take on this in an answer.
Jun
26
comment Hiding Password in Shell Scripts
And then you have the problem of protecting the key - which, again, if you have access to the script, then you can get at the credentials, whether they be a password or a file. The problem isn't new, but that doesn't mean that it's easily solved for your average shell script writer.
Jun
26
comment Hiding Password in Shell Scripts
Sure, but again within the constraints of a shell script, anyone who can get at it can also get at the certificate...
Jun
26
comment Hiding Password in Shell Scripts
I'm unclear on how this will solve the problem of a) being able to connect to a service requiring a password, and b) users being able to see the script and thus being able to figure out the authentication details, whether those are passwords or not
Jun
25
comment Unable to use ssh-copy-id - mktemp: failed to create file via template
@wilhil - file /path/to/program is your friend :-)
Jun
24
comment Gedit start problem in kali linux
Try reinstalling gedit - seems the binary is b0rken.
Jun
23
comment Restart firewall from bash file
What happens if you run the script using set -x?
Jun
23
reviewed No Action Needed How can I find out which mounted filesystems a running process sees?
Jun
23
reviewed No Action Needed How to (really) disable NCQ in Linux