From owner-freebsd-questions@FreeBSD.ORG  Thu Feb 15 00:08:56 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id BE65416A421
	for <freebsd-questions@freebsd.org>;
	Thu, 15 Feb 2007 00:08:56 +0000 (UTC)
	(envelope-from dghatikachalam@gmail.com)
Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.172])
	by mx1.freebsd.org (Postfix) with ESMTP id 4D3D113C48E
	for <freebsd-questions@freebsd.org>;
	Thu, 15 Feb 2007 00:08:56 +0000 (UTC)
	(envelope-from dghatikachalam@gmail.com)
Received: by ug-out-1314.google.com with SMTP id p31so161721ugc
	for <freebsd-questions@freebsd.org>;
	Wed, 14 Feb 2007 16:08:54 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:mime-version:content-type;
	b=SgIs2Ibdvj70zPjaIYKIBL57RCUYZnGIMnqgS2gNrf0i3zeRF0v4CAW1Xe8KTeIt4f5o5EZSThRSsXbjxQfCWPj3/EMmGF1ugCrKp8OHoRwEYJu77CgKg5JoRMBDLYF1dPgZ/oBhbiu+dgn3Kc6Wtw7j2KcNZlGCr8E10olKzzc=
Received: by 10.114.60.19 with SMTP id i19mr822526waa.1171498134602;
	Wed, 14 Feb 2007 16:08:54 -0800 (PST)
Received: by 10.114.211.20 with HTTP; Wed, 14 Feb 2007 16:08:54 -0800 (PST)
Message-ID: <ba29b9b40702141608p57e63b4bg757f57acd33b0dcf@mail.gmail.com>
Date: Wed, 14 Feb 2007 19:08:54 -0500
From: "Dak Ghatikachalam" <dghatikachalam@gmail.com>
To: "FreeBSD - Questions" <freebsd-questions@freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Ksh Shell script security question.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Feb 2007 00:08:56 -0000

Hi Freebsd

I am am puzzled how to secure this code when this shell script is being
executed.

${ORACLE_HOME}/bin/sqlplus -s  <<EOF | tee -a  ${RESTOREFILE}
        connect system/ugo8990d
        set heading off
        set feedback off
        set pagesize 500
        select 'SCN_TO_USE | '||max(next_change#)   from V\$LOG_HISTORY;
        quit
EOF


When I run this code from shell script in /tmp directory it spews file
called /tmp/sh03400.000
in that  I have this entire code visible.

connect system/ugo8990d
set heading off
        set feedback off
        set pagesize 500
        select 'SCN_TO_USE | '||max(next_change#)   from V\$LOG_HISTORY;
        quit

How do I secure that part of code, between
those EOF start and end.

It is just terrible to see the password all shown by the temporary  file the
shell creates,    just for security reasons  I dont want any other users in
the system to view my code which contains the password.

If I have long running sql or large program anything I put in between EOF is
shown by these /tmp/sh*  files

Any idea how to secure this

Thanks
Dak