Hi

I need your kind help on executing a script.

I've created a automate script using EXPECT and placed the
script file in path "/usr/bin/SCRIPT" now i have given a
permission of read and execute to all users in a particular
group say "group - winner" now the user "winner" has a permission
of `rwx` and a user "john" of group "winner" has `rx" permission.

If the user john is logging in and providing a command "SCRIPT"
at the command prompt then the script start works but the user
can also view the file by providing command "cat /usr/bin/SCRIPT".

As the SCRIPT contains confidential information such as passwords etc,
the user "should not be able to view the contents of the SCRIPT" only
the user can execute the file.

Is there any solution for this issue.

I hope you will send me the solution.

Thanks in Advance
Bharani

So if i get this straight, you want the user to have execute permissions, but not read or write? If so do a
"chmod 711" that will give the owner read write execute, group and others execute only. Hope that helps,

tom

Hi John,

Thanks for your reply and also i belive that without a read permission
no executable in linux can be executed.

Please send me any other positive replies.

I think your problem can be solved by putting the passwords into a different file and having the script run as a different user.
Example: The script can be executed by group A, but runs with the permissions of user B. The password-file is only readable by user B.

Generally though I think that you should rather encrypt your passwords than hide them in such a way.

Hi Gray Falcon,

Thanks for your option, but any way if the user can access the script they can see the script
and also the PASSWD FILE so that they can easily view the passwd file by cat command.

Any way i Thankyou a lot for the precious reply. Now i've edited the users ".bashrc" file
using "alias", so all the options of viewing files is blocked.

Thank you once again.
Bharani

Hi,

This is Bharani again, using .bashrc file i've blocked all the editors and viewers
now my problem is, i've added a script in path "/usr/bin/LOGINSCRIPT" and also
added a entry in file ".bashrc" using which the scripts starts automatically when
the user is logged in to system, but if the user press "Ctrl + C" the script stops
and user prompt appears but my query is if the user has pressed "Ctrl + C" the
terminal which the user has connected should be closed or logged out.

Is there any options ?


Thanks in Advance
Bharani

Hello!

Here's a fine tutorial on trapping signals from a script:

http://www.freeos.com/guides/lsst/ch04sec12.html

I still think that your method is not very safe though... have you blocked grep and awk for example? Both can be used to display the contents of a file too... And what about gcc or g++? There's so many commands that can show you what is in a file, I hardly think you can block them all. If you insist, you whould perhaps rather have a whitelist than a blacklist, but you'd really have to have very few entries.