All geek questions in one place

Are my environment variables safe for other users on the system?

I hope the system does not matter as long as it is current, but I am using Ubuntu 11.10 server. Is there any way for any user y to see user environment x variables? In other words, is it safe to store the password in an environment variable during script installation - assuming that the user running the software is allowed to know it?

+4
source share
2 answers

You can access environment variables reading the file /proc/*PID*/environ . But he has the same powers as the process to which he belongs.

+2
source

As far as I know, you can write passwords stored in memory using a memory dump. To minimize risks, password management tools overwrite memory (i.e., clipboard) after a few seconds.

Edit: Search the web I found an example of this technique in ubuntu here .

0
source

Source: https://habr.com/ru/post/1395678/

More articles:


All Articles