ADSM-L

Re: Password visibility in the client command line

1997-01-20 10:04:20
Subject: Re: Password visibility in the client command line
From: Bradley King <king AT MONTROUGE.GM.SLB DOT COM>
Date: Mon, 20 Jan 1997 16:04:20 +0100
>If a user issue the following command:
>dsmc -node=<nodename> -pass=<secret password>
>all other users are able to see his password with a command like:
>ps -edf | grep dsmc.
>It seems to bee a real problem of security for us.
>Can anyone help me to find a way to enter a real secret password at the
>CLI command line
>when I use the -node option?
>        JLDW

I assume that ps -ef means that we are talking System V Unix of some kind.
Since the node is more related to the machine than any particlar users
files, we simply give the name of the machine as the password.  When
a particular user uses dsm or dsmc they only have access to their
own files unless other users have allowed them access.  Our schedule
is run by root so that all files are backed up, but for restauration
only files that belong to logged on user are accessible.  The password
is more critical for a PC type machine where anyone with a compatible
machine can connect to a user's node and acces their files using the
correct password.

The command: dsmc -node=toto -password=toto is the only way I know,
but it presents no particular security problem for a Unix system
(in my opinion)