The UNIX and Linux Forums  
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.

Go Back   The UNIX and Linux Forums > Special Forums > Security
.
google unix.com



Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
How to hide command line parameters? xyzt UNIX for Advanced & Expert Users 6 08-31-2009 07:31 PM
Passwords are dead - long live passwords iBot IT Security RSS 0 06-25-2009 11:15 PM
How do I parse passwords into passwd command. gilberteu Shell Programming and Scripting 0 03-28-2006 11:26 AM
How to hide files in unix Sireesha NP HP-UX 1 04-05-2005 09:44 AM
Hide Passwords lesstjm Shell Programming and Scripting 3 04-05-2005 01:18 AM

Reply
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish Powered by Powered by Google
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 09-15-2009
bhagirathi bhagirathi is offline
Registered User
  
 

Join Date: Jul 2009
Posts: 10
how to Hide Passwords From UNIX ps Command

Hi,
By reporting the process status with ps, any Unix user will see the command line arguments
#ps -ef
UID PID PPID C STIME TTY TIME CMD
lsc 13837 13825 0 May 11 pts/17 0:01 -ksh
oracle 4698 6294 0 12:00:40 ? 0:00 sqlplus -s system/manager
appluser 4229 4062 0 12:00:03 ? 0:00 sqlldr scott/tiger


So this is a security issue.
1.How the password should not be stored in a shell environment variable
  #2 (permalink)  
Old 09-15-2009
fpmurphy's Avatar
fpmurphy fpmurphy is offline Forum Staff  
Moderator
  
 

Join Date: Dec 2003
Location: Florida
Posts: 1,913
This topic has been discussed many many times on this forum and elsewhere. A simple search of this forum or the Internet will show you many ways to accomplish what you want to do. For example I entered "oracle hide password" in the forum search box and got overy 10 pages of replies.
Attached Thumbnails
how-hide-passwords-unix-ps-command-unix.png  
  #3 (permalink)  
Old 09-15-2009
methyl methyl is offline
Registered User
  
 

Join Date: Mar 2008
Posts: 1,163
For Oracle, one way is to store the program in a file and get Oracle to execute it.

Code:
sqlplus /NOLOG @programname.sql

Within the file programname.sql the first line will be an Oracle "CONNECT" statement, for example:
connect SYS/change_on_install as SYSDBA ;

This method is really the normal way and by having the program in a file avoids the clash with shell from characters such as "$" .
Don't forget to protect the file from prying eyes with unix permissions.

Last edited by methyl; 09-15-2009 at 01:46 PM.. Reason: ;
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 11:56 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language Translations Powered by .
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0