RE: permissions and security

[Paul Hamm <paulhamm OpenRatings com>]

Better ways to do this.  One is to create identical users on both machines
with the same password and then run your scripts with that ID, I did this
myself for downloads from a partner.  Better still use ssh with RSA
authentication between the machines, all traffic is encrypted.

Oh and please tell me you are not running the local machine as root <----
Very bad thing to do.  Use sudo instead much better idea.

-----Original Message-----
From: Nick Wilson [mailto:nick explodingnet com]
Sent: Thursday, February 28, 2002 11:36 AM
To: RedHat-List
Subject: permissions and security


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all, 
someone told me it was a *very* bad idea to have passwords sitting in
text files on my machine.

Okay, I can see that, I'm the root user though and I'd like to have a
little script to connect via ncftp to my remote server. (complete with
password)

If I gave the file 600 perms would that be a risk?
- -- 
- -----------------------------------------------------------
 www.explodingnet.com   |    Projects, Forums and
                        +    Articles for website owners 
- -- Nick Wilson --     |    and designers.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)

iD8DBQE8flxtHpvrrTa6L5oRAiAbAJ4g3XV6KSbf7C0dQUOB9F6VrLkhbQCfdfHy
XBYNAKz7rcABeq5jxZi7r/4=
=yW8v
-----END PGP SIGNATURE-----



_______________________________________________
Redhat-list mailing list
Redhat-list redhat com
https://listman.redhat.com/mailman/listinfo/redhat-list