09-25-2017
Quote:
Originally Posted by
Jaewong
Hi Don, what do you mean by the follows ?
Do you mean to name the credential file with loginName and password as "xxxx.secret" ?
If so, I tried to name it as "login.secret", but it can still show up with "ls" command.
" To make it slightly less obvious to people looking for passwords, I would suggest that the last component of the absolute path named by DATAFILE should have a period as the first character (such as .secret) so it won't show up in an ls command unless the -a option is included. "
That is not what I said. Look more closely at the red text in your quote from my earlier message above.
The first character of
xxx.secret and
login.secret is not a period so they will not be hidden when listed by
ls. If you name the file
.secret (with a period as the first character as I suggested), it will not show up in
ls output unless you include the
-a option on the
ls command.
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
Hello,
I am very new to Unix so I want to apologize in advance in case my question is stupid.
I wrote a KORN script that I am planning to distribute to many users. This script contains sensitive information that the users should not see: user name and password to our database servers with... (11 Replies)
Discussion started by: alan
11 Replies
2. Programming
I am doing a project in C program which requires to type in password in Unix terminal. Does anybody know how to shade or not output any words typed by user in the terminal?
I use the function scan() to read typing from user. Thanks in advance. (2 Replies)
Discussion started by: ivancheung
2 Replies
3. Shell Programming and Scripting
Hi falks,
I have the following ksh code:
echo "Enter VS Admin password:"
oldstty=`stty -g`
stty -echo intr '$-'
read password
stty $oldstty
echo
This code ask from a user to enter his password. The OS suppose to hide the entering of the... (2 Replies)
Discussion started by: nir_s
2 Replies
4. Shell Programming and Scripting
Hi everybody,
Do you know how to hide the text for interactive unix shell script? Just like the case for inputting password during logon.
Patrick (1 Reply)
Discussion started by: patrickpang
1 Replies
5. Shell Programming and Scripting
All,
In my script I am calling another script.. in that script I need to enter a password. Problem is that everyone is able to see the password when I enter that. Is there any way that when i enter that password it should not display or may look like *******.
Or if there any other way that I... (1 Reply)
Discussion started by: arpitk
1 Replies
6. Shell Programming and Scripting
Hi,
I am writing a UNIX .ksh script and need to send the login password of the login id that is executing the script to a command that I am executing in the script. I don't want that password to be seen by anyone except whoever is executing the script.
Does anyone know how I can accomplish... (6 Replies)
Discussion started by: samd
6 Replies
7. UNIX for Dummies Questions & Answers
hi all,
i run sqlplus command on unix(HP-UX)
like "sqlplus username/password@serverA @deneme.sql"
but when someone run "ps -ef | grep sqlplus", it can see my username and password :(
How can i hide username and password.
thanx. (1 Reply)
Discussion started by: temhem
1 Replies
8. Shell Programming and Scripting
Dear folks,
The title of my thread says mostly all of what I want to do. Basically I want to auto-ssh to a remote host, and run a program on it (VLC is just an example). I wrote a script which calls xterm and then runs expect on it. The code is as follow
#!/bin/bash
export PASS="xxxxxxx"... (22 Replies)
Discussion started by: dukevn
22 Replies
9. Shell Programming and Scripting
Hi
I have following problem Im writing a script (in bash ) , where need to be written login & passwd for databas client .
Its need to in following form login passwd@dbhostname .
The problem is so anybody can read it so the passwd & login are visible and thats not very safety .
Can... (8 Replies)
Discussion started by: kvok
8 Replies
10. Shell Programming and Scripting
i have an expect script that runs like this:
/usr/bin/expect -f /home/skysmart/commandstoexecute.sh host2.net b$4aff Skysmart
when i run this command, and i do a ps -ef and egrep for expect, i see the exact line in the process table and it shows my password for the world to see.
how can i... (2 Replies)
Discussion started by: SkySmart
2 Replies
newgrp(1) General Commands Manual newgrp(1)
NAME
newgrp - switch to a new group
SYNOPSIS
[group]
DESCRIPTION
The command changes your group ID without changing your user ID and replaces your current shell with a new one.
If you specify group, the change is successful if group exists and either your user ID is a member of the new group, or group has a pass-
word and you can supply it from the terminal.
If you omit group, changes to the group specified in your entry in the password file,
Whether the group is changed successfully or not, or the new group is the same as the old one or not, proceeds to replace your current
shell with the one specified in the shell field of your password file entry. If that field is empty, uses the POSIX shell, (see sh-
posix(1)).
If you specify (hyphen) as the first argument, the new shell starts up as if you had just logged in. If you omit the new shell starts up
as if you had invoked it as a subshell.
You remain logged in and the current directory is unchanged, but calculations of access permissions to files are performed with respect to
the new real and effective group IDs.
Exported variables retain their values and are passed to the new shell. All unexported variables are deleted, but the new shell may reset
them to default values.
Since the current process is replaced when the new shell is started, exiting from the new shell has the same effect as exiting from the
shell in which was executed.
EXTERNAL INFLUENCES
International Code Set Support
Characters from the 7-bit USASCII code set are supported in group names (see ascii(5)).
DIAGNOSTICS
The command issues the following error messages:
Your user ID does not qualify as a group member.
The group name does not exist in
If a password is required, it must come from a terminal.
Standard input is not a terminal file,
causing the new shell to fail.
EXAMPLES
To change from your current group to group without executing the login routines:
To change from your current group to group and execute the login routines:
WARNINGS
There is no convenient way to enter a password into
The use of group passwords is not recommended because, by their very nature, they encourage poor security practices. Group passwords may
be eliminated in future HP-UX releases.
If the specified group to has multiple inconsistent entries (i.e. the group id or/and password are different) in the group database, will
consider the group id and password of the first matched group entry as the correct group id and password for the group.
FILES
System group file
System password file
SEE ALSO
csh(1), ksh(1), login(1), sh-posix(1), group(4), passwd(4), environ(5).
STANDARDS CONFORMANCE
newgrp(1)