10-26-2006
Implications of setting sensitive data in ENV
Hello people,
In shell scripts if some sensitive data is set into the env so that it is available to other scripts called within those scripts -- Are there are security implications ?
-- I believe the scope of those environment variables ends with the execution of the script.
-- I see that while the script is running those env variables are not accessible from the command line.
Is my understanding correct? Any comments ? Please let me know.
Regards,
T.
10 More Discussions You Might Find Interesting
1. Solaris
I am trying to set up my compiler, but when I go to look for
gcc it not found but I get a message
that stayed (/usr/oasys/bin) and when I go into the dir
to set my env the following is type
cp : cannot creat //pref/.environ: no such file or directory
and I input ./setenv PATH=... (3 Replies)
Discussion started by: alsande
3 Replies
2. AIX
hi eveybody,
i m trying to set acl using acledit command in AIX box
but wat im gettung is
3002-100 acledit: EDITOR environment variable not set
can anyone help me out how 2 set editor....................
thanks in advance (4 Replies)
Discussion started by: rrlog
4 Replies
3. Red Hat
Hi there,
How can I change bash to csh when starting a terminal, and set some aliases for csh? I can't find such files like .cshrc in my home directory.
Thanks a lot (1 Reply)
Discussion started by: dustinwang2003
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
I wrote two small scripts to set env variables in a shell.
java_env.csh
#!/bin/csh -fn
setenv JAVA_HOME '/scratch/software/jdk1.5.0_11'
setenv PATH $PATH':'$JAVA_HOME'/bin'
and run it using csh ./java_env.csh
But the env variables are not set. I tried running each line on the... (5 Replies)
Discussion started by: NoviceAmod
5 Replies
5. Shell Programming and Scripting
I am facing a very strange issue. I have script in ksh with #!/bin/ksh as shebang.
This script has function which sets the env variable before running other functions of the script. by
set_up_env()
{
CONFIG_FILE="/opt/app/tools/deepmarking/latestVersion/script/UploadEnv"
if
then
... (7 Replies)
Discussion started by: Tuxidow
7 Replies
6. Shell Programming and Scripting
I have perl script and in the first line we are invoking .sh script to set ENV variables.
e..g
eval '. $envfile; exec $PERL -S $0 "$@"'
I want to change some of the env variables while the program is running and I am settging it like this ..
$ENV{ORACLE_HOME}=trim($oraclehome);... (1 Reply)
Discussion started by: talashil
1 Replies
7. Post Here to Contact Site Administrators and Moderators
Hello,
Can you please delete or modify a post that contains sensitive data. I can't post full links, here's the end of the link: shell-programming-and-scripting/94965-help-shell-scripting-modify-user-creation-script-oracle-database.html
It's got a lot of data that should never be posted on... (2 Replies)
Discussion started by: JonHeller
2 Replies
8. Post Here to Contact Site Administrators and Moderators
Hi Sir ,
Please remove the following code from the post
https://www.unix.com/unix-for-advanced-and-expert-users/210081-ftp-issue.html
thanks
Prabhu (7 Replies)
Discussion started by: ptappeta
7 Replies
9. Post Here to Contact Site Administrators and Moderators
Hi Sir,
please remove following terms from post as it is sensitive data
https://www.unix.com/shell-programming-and-scripting/235655-print-single-line.html
ifeeds
fidedev
ironsides
feedmgr
thanks a lot
prabhu (1 Reply)
Discussion started by: ptappeta
1 Replies
10. Post Here to Contact Site Administrators and Moderators
Hi
Kindly remove the following from the post . These are confidential info posted by mistake
https://www.unix.com/shell-programming-and-scripting/201037-perl-while-loop-each.html
please remove the comments section which is first 16 lines in the perl script .
Also please remove the ... (1 Reply)
Discussion started by: ptappeta
1 Replies
LEARN ABOUT DEBIAN
dh-exec-subst
DH-EXEC-SUBST(1) dh-exec DH-EXEC-SUBST(1)
NAME
dh-exec-subst - Debhelper executable file substition scripts
SYNOPSIS
#! /usr/bin/dh-exec
src/libfoo-*.so.* debian/foo-plugins/usr/lib/foo/${DEB_HOST_MULTIARCH}/
DESCRIPTION
Being a sub-command of dh-exec(1), this program must not be ran directly, but through dh-exec, which automatically runs all available
sub-commands if run bare; or explicitly with dh-exec --with=subst.
It is a wrapper around the various other substitution helpers, and will pipe the input file through all the available substitution helpers.
It is up to these scripts to do the actual work.
When a helper fails to expand a variable within its input, it will leave it as-is, so that later in the pipeline it can perhaps be expanded
by another program.
SCRIPTS
dh-exec-subst-env
Substitutes any of the available, exported environment variables into its input. It does not do any kind of filtering: whatever is
available in the environment, will be available for substitution, however unsafe that may be.
dh-exec-subst-multiarch
Attempts to expand any of the variables known to dpkg-architecture(1), mostly useful for multi-arch support.
The command will query dpkg-architecture(1) directly, and does not rely on environment variables set (as the called program will
prefer already set environment variables anyway).
ENVIRONMENT
DH_EXEC_SCRIPTDIR
Indicates which directory the command-specific scripts should be sought for. If not specified, scripts will be searched for in
/usr/share/dh-exec/.
FILES
$DH_EXEC_SCRIPTDIR/dh-exec-subst-*
The various scripts for the higher-level program.
SEE ALSO
debhelper(1), dh-exec(1)
AUTHOR
dh-exec-subst is copyright (C) 2011-2012 by Gergely Nagy <algernon@madhouse-project.org>.
2012-05-03 DH-EXEC-SUBST(1)