Anyhting you do in a shell script can easily be hacked (ie adding set -x)
at top of the script, editing the script to echo password to screen.... Therefore it defeats the purpose of crypting and decrypting the passwords in a script.
If you want to hide the password from a ps -ef command you can
do something like this:
Code:
#!/bin/ksh
sqlplus -s /nolog <<EOT
connect login/password
select name from v\$database;
exit;
EOT
The best way to proceed would probably be using your DB user (most
likely "oracle") and identify that that user externally so no
password is required to login to the DB
Hope this helps..
Good luck
Last edited by Scott; 11-23-2011 at 02:27 PM..
Reason: Code tags
Hi Everybody,
I have a script that telnet another system. For some reasons, this is should be done by "root", so the root password has been written explicitly in this script, which mean any body read this script will know the root password of the other system. I think the solution is to write... (6 Replies)
Help..
I need to decrypt a file that was encrypted using DES 56 Bit.
I have the encryption key and the block size used but no idea what utility to use..
I then need to encrypt the file using pgp and another key I have.. againt I dont know what utility to use.
I am running solaris 9 ....
... (0 Replies)
Dear Experts,
I am using one script name :volume.sh and its written in bash shell script.
I just want to encrypt the script so that any one else cannot see it.
please tell me the commands how to encrypt the script as well as to decrypt it.
Regards,
SHARY (9 Replies)
Hi, I want to encrypt and decrypt a string(database password) which will be used in my scripts.
encrypt the string while storing in a file and while using it in other scripts
it should decrypt.
i tried below method. As it can decrypt easily, it is not recommended.
encrypt=`perl -e 'print unpack... (5 Replies)
Hi All,
very good morning all.
I am trying to connect to informatica repository by using shell script.
I have written pmrep connect command in the script file. But i need to provide repository, domain ,username and password to connect. Username and password are hard coded in the script... (8 Replies)
Hi All,
Can I use MCRYPT - (RIJNDAEL-128) / CBC mode to encrypt and decrypt a file?
I am trying to find some sample C program on internet, which will encrypt and decrypt a file. But was not able to find any thing.
Can some help me with the programming.
Thanks. (1 Reply)
Hello,
I have the following UNIX shell script which connects to the teradata database and executes the SQL Queries. For this, I am passing database name, username and password. I don't want to reveal my password to anyone. So, is there any way that I can encrypt my password and read the... (2 Replies)
Hello,
I have few files on unix which are payroll related and I need them to encrypt with password so others wouldn't see the data. I use ETL tool and would like to know the unix command that does encryption/decryption to use in the ETL.
Thank you,
Sri (3 Replies)
Discussion started by: eskay
3 Replies
LEARN ABOUT PHP
setuid
SETUID(1) General Commands Manual SETUID(1)NAME
setuid - run a command with a different uid.
SYNOPSIS
setuid username|uid command [ args ]
DESCRIPTION
Setuid changes user id, then executes the specified command. Unlike some versions of su(1), this program doesn't ever ask for a password
when executed with effective uid=root. This program doesn't change the environment; it only changes the uid and then uses execvp() to find
the command in the path, and execute it. (If the command is a script, execvp() passes the command name to /bin/sh for processing.)
For example,
setuid some_user $SHELL
can be used to start a shell running as another user.
Setuid is useful inside scripts that are being run by a setuid-root user -- such as a script invoked with super, so that the script can
execute some commands using the uid of the original user, instead of root. This allows unsafe commands (such as editors and pagers) to be
used in a non-root mode inside a super script. For example, an operator with permission to modify a certain protected_file could use a
super command that simply does:
cp protected_file temp_file
setuid $ORIG_USER ${EDITOR:-/bin/vi} temp_file
cp temp_file protected_file
(Note: don't use this example directly. If the temp_file can somehow be replaced by another user, as might be the case if it's kept in a
temporary directory, there will be a race condition in the time between editing the temporary file and copying it back to the protected
file.)
AUTHOR
Will Deich
local SETUID(1)