Security Issue with Standard Input?


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Security Issue with Standard Input?
# 1  
Old 10-10-2006
Security Issue with Standard Input?

Hi Gang,

Running a script in AIX 5.3. Users wanted me to add a "confirm you want to run script, enter 'y' or 'n'" kind of thing... here is what I came up with:

#!/bin/sh

myfile=`basename "$1"`
dateNow=`date "+%m.%d.%Y.%H.%M.%S"` # Get current date
mydatedfile=$myfile.$dateNow
appfolder="/home/43168134/prod"
newfolder="/home/43168134/arch"

echo "Are you sure you want to approve $myfile ?"
echo ""
echo "Okay?("Y" or "N")=> "
set ret = "$<"
if ("$ret" != "y" && "$ret" != "Y") then
echo ""
echo ""
echo "End."
exit 0
else
if [ -s "$myfile" ]; then
mv "$myfile" "$appfolder/$myfile" # Move file to another folder
cp -p "$appfolder/$myfile" "$newfolder/$mydatedfile" # Copy file with new archive name
print "$myfile has been moved to Production and Archived."
else
print "$myfile does not exist or is empty."
exit 1
fi
fi
exit 0


When I run the script, I get this:

$ approveTEST.sh CallidusFile3.csv
Are you sure you want to approve CallidusFile3.csv ?

Okay?(Y or N)=>
approveTEST.sh[13]: : 0403-006 Execute permission denied.
CallidusFile3.csv has been moved to Production and Archived.


The script does the move/copy OK, but won't accept any input and instead gives me an error. I did chmod 755 and 744 hoping that would fix it, but no luck.

Any thoughts?

Thanks in advance...
# 2  
Old 10-10-2006
Try changing
Code:
if ("$ret" != "y" && "$ret" != "Y") then

to
Code:
if [ "$ret" != "y" -a "$ret" != "Y" ]; then

Also, please use code tags.
# 3  
Old 10-10-2006
Will do going forward...

I'll give your fix a try... Thanks!
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. HP-UX

Security hardening for standard HP-UX users

Hi, The standard accounts that are created during the HP-UX installation, eg, bin,adm,daemon,uucp,lp,hpdb and nobody have their own shell. Will there be any impact if we change these user's shell to /bin/false? Like processes get interrupted, files cannot be generated, etc. Regards (3 Replies)
Discussion started by: anaigini45
3 Replies

2. Homework & Coursework Questions

Removing punctuations from file input or standard input

Just started learning Unix and received my first assignment recently. We haven't learned many commands and honestly, I'm stumped. I'd like to receive assistance/guidance/hints. 1. The problem statement, all variables and given/known data: How do I write a shell script that takes in a file or... (4 Replies)
Discussion started by: fozilla
4 Replies

3. Shell Programming and Scripting

standard input and cron

I have a program that requires the user to enter input values while it is being run for example in bash ... ... .. echo "Enter your input" read input echo $input ... ... ...I need to schedule this program with crontab, hence a problem, cronjobs run in the background, any ideas on how to... (10 Replies)
Discussion started by: walforum
10 Replies

4. Shell Programming and Scripting

Reading from standard input

So, I am new to shell scripting and have a few problems. I know how to read from standard input but I do not know how to really compare it to say, a character. I am trying to compare it to a character and anything exceeding just a character, the user will get an output message, but the program... (7 Replies)
Discussion started by: Bungkai
7 Replies

5. Shell Programming and Scripting

Reading Standard Input

Hello, I am new to scripting. How do I read multiple lines from the command line? I know read reads one line, but if I have to read multiple lines, how should I do? Thanks, Prasanna (4 Replies)
Discussion started by: prasanna1157
4 Replies

6. Shell Programming and Scripting

Reading from standard input with awk

Hello, Could somebody please give me an awk example on how to read from the standard input. It means as the "read" function in Korn shell. Thx in advance ... (3 Replies)
Discussion started by: rany1
3 Replies

7. Solaris

standard input

Please give me any example for standard input in Solaris. (6 Replies)
Discussion started by: karman0931
6 Replies

8. Shell Programming and Scripting

change standard input ?

Dear... I have a scrpit that contains multiple read command.... when I run the script I have to enter 3 variables so that I can get the output.. but, I dont want to put those 3 inputs manually every time... I want to make a shell that reads the 3 inputs from a file. the script name is... (4 Replies)
Discussion started by: yahyaaa
4 Replies

9. Shell Programming and Scripting

How to copy from standard input

I tried copy the output files from find command into a directory. Example, find / -name core 2>/dev/null | xargs cp???? I have known that we can use xargs to execute command lines from standard input but how to use it in this case. Or I can do something besides xargs. (2 Replies)
Discussion started by: lalelle
2 Replies

10. Shell Programming and Scripting

standard input

how can i redirect standard input? i dont remember :/, though could you redirec not from a command? i mean, to redirect always stdin and stout (1 Reply)
Discussion started by: Jariya
1 Replies
Login or Register to Ask a Question