UNIX for Advanced & Expert Users

Hi Guys,

I wonder I had have a look to the cc compile options but I could be missing one but basically I'm compliling a c program where I will storing a command to connect to a database and also userid and password. The issue is that after the module is generated using a command like strings I can see the the user and password in plain text. I wonder if anyone know if there is a option on the c compiler so I can encrypt the c module so the users or whoever will be granted to execute this module they don't get to see the user/password at all. I will be giving then execute access only so they shouldn't be able to view the file but want to make it extra secure if possible. thanks.

The answer is: don't hard code passwords.

One workaround is to encrypt the password into a file, then decrypt it at runtime. With a 600 permission the encrypted file is not a complete sitting duck for users on your system to play with. This also has some security issues, but is a lot better than just putting a password into a C source file. The best solution is to get the password interactively at run time.

if someone can execute the program they can read it. eg: debugger. don't hardcode a password as Jim suggested.

Hi Guys,

thanks. So I should be looking at makekey , keylogin and other commands to make this more robust. thanks again.

You may hardcode a password as long as it is not plain text. But doing so may offer a little advantage only - if ever - compared to the flexibility you gain having the password encrypted in a file.

Loïc

Doesn't matter how you do it - if they can run the program, they can get the password using something like strace or truss.

Unless you make the process setuid or setgid, which opens up a whole new set of problems.

I can see the disavantage of having the password in plain text but haven't heard something really useful/mininful for someone who has come across to the same situation. It would be good to hear from someone to have been in similar situation and how they got around it. thanks.