secure scripts

[nani3456]

Hi,
Can any body help me out ? How can I secure my scripts in my environment many users and admin users have access to all the files, I want to secure my scritps so that no one can read them, bcoz my scripts contain passwords and lot of valid information.
I want my files to be protected for reading and writing but everyone should be able to execute them.
Please give me step by step solution.
Help appreciated

Thanks
nani3456

 

[columb]

Try looking at the 'chmod' command, for example

chmod 700 MyScriptFile.ksh

but be aware that this won't stop sysadmins - we have godlike powers!

Ceci n'est pas une signature
Columb Healy

 

[nani3456]

Hi Columb,
This will not help my problem, I had given 111, means
chmod 111 MyScriptFile.ksh ( sysadmins are changing them and editing, we have 3 roots working on this system round the clock)
so that everyone can excute them but can't read or write.
Even then other roots or sysadmins are changing them, i want it to be protected so that no one can see, in one way i want it to be in binary mode or encrypted one so that no one can understand,

help me guys

Thanks in advance

 

[cspilman]

Have a look at shc (Shell Compiler):

http://www.datsi.fi.upm.es/~frosal/

Regards,
Chuck

 

[columb]

I think it's more important that you resolve your issues with the Sys Admins. If they are modifying your scripts without your permission then either
[ol]
[li]They ought to be sacked for unauthorised changes[/li]
[li]You shouldn't be writing scripts that the Sys Admins need to change[/li]
[/ol]
It is certain that I, as a Sys Admin, would lose my job if I were amending, or even viewing, other people's code without very good reason.

Ceci n'est pas une signature
Columb Healy

 

[sbix]

Try with ACL,s

 

[sbix]

Ooooops .... I forgot you're a vendor not a tech.
Uhm.... from the security view point the fact of having users and passwords clearly written in a file IS the main problem.
You could protect these data (username/password) by inserting them in an encrypted file, accessed by some software... but this would became a strange replica of /etc/passwd
You should think something different, because that script of yours is actually a security leak

 

[RMGBELGIUM]

regarding passwords in files , a workaround is retrieving your passwords stored in a database.

kind rgds,

R.

 

[khalidaaa]

Try this link

http://www.unix.org.ua/orelly/networking/puis/ch05_02.htm

Regards,
Khalid

 

[FrankieAIX]

Khalid,

The link you posted is not active it says "Page Deleted"..

-FrankieAIX

 

[khalidaaa]

OMG

That was a good document talking about ACLs and TCB

any way, try this link

http://www.auditnet.org/docs/AIXSecurityIssues.doc

Regards,
Khalid

 

[mrn]

It's still available in google cache

http://66.249.93.104/search?q=cache...ng/puis/ch05_02.htm+&hl=en&gl=uk&ct=clnk&cd=1

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[khalidaaa]

Thanks mrn

 

[Mag0007]

You can actually encrypt your password with gnupg, and have your script interactat with gnupg. I have seen this done before...I will try to find the code for you...

 

[nani3456]

Hi Mag0007,

Eargerly waiting for your reply.

Please give me steps and procedure to implement gnupg.

Thanks in advance
nani

 

[zaxxon]

Hi,

http://www.gnupg.org/(en)/documentation/faqs.html

might help.
Maybe look for "4.14) How can I use GnuPG in an automated environment?".

laters
zaxxon