Re: Securing command line passwords

[David Baron <d_baron@012.net.il>]

On Friday 25 February 2005 11:14, Alvin Oga wrote:
> use scp ...
>         - put your key in the other machine
>         and less painful but less secure way is fix .shosts(?) or
>         .rhosts for rsh which you should not use
>
> use nfs ..
>         mount remote:/stuff /mnt/remote
>         scp your-data /mnt/remote
>         umount /mnt/remote

There is only one machine as of now. So ...
Is there something I can do instead of

this-command-needs-password   --passwd=gotcha  ...

To retrieve the password from some "secrets" file or other scheme?

PASSWD = getsecret(for-this-command-needs-password)
this-command-needs-passowrd --passwd=$PASSWD ...

Not perfect but pam certainly operates off such a system.