|
Posted by Velαsquez, Constantin on 08/15/06 18:39
Jerry Stuckle wrote:
> For as long as the program is running, and I think only if you're an
> admin (but I could be wrong on that).
>
> But who's going to have ssh/telnet access to the system? And how long
> is the program going to run?
A simple script could save the command line argument in a
evil.example.org server (it's very hard to hide it but it could be
inserted in other program or simply replace it).
I suggest to use encrypted environment variables or simple environment
variables for a lower security level.
Navigation:
[Reply to this message]
|