Re: system passwd viewable via ps -ef

From: <twod_at_not.valid>
Date: 1997/04/11
Message-ID: <5ikbsn$fmv$1@vnetnews.value.net>#1/1

Nisar Ahmad (nisar_at_jansher.demon.co.uk) wrote:
: What you can do is to pad out the command line with lots of spaces
: before the username / password so that it goes off the end of the screen
: and you can't see it when you do a ps -ef.
: sqlplus system/password

Not portable and still does not solve the base problem as the parameters are still in the process table:

bash$ uname -a
SunOS wallaceII 5.5.1 Generic i86pc i386 i86pc bash$ cat pop
#!/bin/sh  

sleep 20

bash$ ./pop                                          secret &

[1] 440
ps -efl | grep pop | fold
 8 S ianp 440 269 0 41 20 f5d65330 196 f5d653a0 21:36:14 pts/3 0 :00 /bin/sh ./pop secret

IAP

--
In an attempt to reduce junk email I use an invalid 'From' address.
My correct email address is twod_at_value.net

Received on Fri Apr 11 1997 - 00:00:00 CDT