10-26-2006
Implications of setting sensitive data in ENV
Hello people,
In shell scripts if some sensitive data is set into the env so that it is available to other scripts called within those scripts -- Are there are security implications ?
-- I believe the scope of those environment variables ends with the execution of the script.
-- I see that while the script is running those env variables are not accessible from the command line.
Is my understanding correct? Any comments ? Please let me know.
Regards,
T.
10 More Discussions You Might Find Interesting
1. Solaris
I am trying to set up my compiler, but when I go to look for
gcc it not found but I get a message
that stayed (/usr/oasys/bin) and when I go into the dir
to set my env the following is type
cp : cannot creat //pref/.environ: no such file or directory
and I input ./setenv PATH=... (3 Replies)
Discussion started by: alsande
3 Replies
2. AIX
hi eveybody,
i m trying to set acl using acledit command in AIX box
but wat im gettung is
3002-100 acledit: EDITOR environment variable not set
can anyone help me out how 2 set editor....................
thanks in advance (4 Replies)
Discussion started by: rrlog
4 Replies
3. Red Hat
Hi there,
How can I change bash to csh when starting a terminal, and set some aliases for csh? I can't find such files like .cshrc in my home directory.
Thanks a lot (1 Reply)
Discussion started by: dustinwang2003
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
I wrote two small scripts to set env variables in a shell.
java_env.csh
#!/bin/csh -fn
setenv JAVA_HOME '/scratch/software/jdk1.5.0_11'
setenv PATH $PATH':'$JAVA_HOME'/bin'
and run it using csh ./java_env.csh
But the env variables are not set. I tried running each line on the... (5 Replies)
Discussion started by: NoviceAmod
5 Replies
5. Shell Programming and Scripting
I am facing a very strange issue. I have script in ksh with #!/bin/ksh as shebang.
This script has function which sets the env variable before running other functions of the script. by
set_up_env()
{
CONFIG_FILE="/opt/app/tools/deepmarking/latestVersion/script/UploadEnv"
if
then
... (7 Replies)
Discussion started by: Tuxidow
7 Replies
6. Shell Programming and Scripting
I have perl script and in the first line we are invoking .sh script to set ENV variables.
e..g
eval '. $envfile; exec $PERL -S $0 "$@"'
I want to change some of the env variables while the program is running and I am settging it like this ..
$ENV{ORACLE_HOME}=trim($oraclehome);... (1 Reply)
Discussion started by: talashil
1 Replies
7. Post Here to Contact Site Administrators and Moderators
Hello,
Can you please delete or modify a post that contains sensitive data. I can't post full links, here's the end of the link: shell-programming-and-scripting/94965-help-shell-scripting-modify-user-creation-script-oracle-database.html
It's got a lot of data that should never be posted on... (2 Replies)
Discussion started by: JonHeller
2 Replies
8. Post Here to Contact Site Administrators and Moderators
Hi Sir ,
Please remove the following code from the post
https://www.unix.com/unix-for-advanced-and-expert-users/210081-ftp-issue.html
thanks
Prabhu (7 Replies)
Discussion started by: ptappeta
7 Replies
9. Post Here to Contact Site Administrators and Moderators
Hi Sir,
please remove following terms from post as it is sensitive data
https://www.unix.com/shell-programming-and-scripting/235655-print-single-line.html
ifeeds
fidedev
ironsides
feedmgr
thanks a lot
prabhu (1 Reply)
Discussion started by: ptappeta
1 Replies
10. Post Here to Contact Site Administrators and Moderators
Hi
Kindly remove the following from the post . These are confidential info posted by mistake
https://www.unix.com/shell-programming-and-scripting/201037-perl-while-loop-each.html
please remove the comments section which is first 16 lines in the perl script .
Also please remove the ... (1 Reply)
Discussion started by: ptappeta
1 Replies
LEARN ABOUT OPENDARWIN
env
ENV(1) BSD General Commands Manual ENV(1)
NAME
env -- set and print environment
SYNOPSIS
env [-i] [name=value ...] [utility [argument ...]]
DESCRIPTION
env executes utility after modifying the environment as specified on the command line. The option name=value specifies an environmental
variable, name, with a value of value. The option '-i' causes env to completely ignore the environment it inherits.
If no utility is specified, env prints out the names and values of the variables in the environment, with one name=value pair per line.
DIAGNOSTICS
If the utility is invoked, the exit status of env shall be the exit status of utility; otherwise, the env utility exits with one of the fol-
lowing values:
0 The env utility completed successfully
1-125 An error occurred in the env utility.
126 The utility specified by utility was found, but could not be invoked.
127 The utility specified by utility could not be found.
COMPATIBILITY
The historic - option has been deprecated but is still supported in this implementation.
SEE ALSO
execvp(3), environ(7)
STANDARDS
The env utility conforms to IEEE Std 1003.2-1992 (``POSIX.2'').
BUGS
env doesn't handle commands with equal (``='') signs in their names, for obvious reasons.
BSD
August 27, 1993 BSD